last executing test programs: 6m5.866494646s ago: executing program 3 (id=2725): timer_create$auto(0x0, &(0x7f0000000140)={@sival_ptr=0x0, @inferred, 0x1}, &(0x7f0000000200)=0x1000004) timer_settime$auto(0x0, 0x8, &(0x7f0000000040)={{0x0, 0xd3}, {0x1000}}, &(0x7f0000000100)={{0xa04, 0x4}, {0x9000, 0x7ff}}) 6m5.723885628s ago: executing program 3 (id=2729): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptye3\x00', 0x400, 0x0) ioctl$auto_TIOCGPGRP2(r0, 0x540f, &(0x7f0000000280)) 6m5.518690031s ago: executing program 3 (id=2734): openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000800), 0x40, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) 6m5.371258279s ago: executing program 3 (id=2737): r0 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x80108906, 0x0) 6m5.190653251s ago: executing program 3 (id=2742): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) tkill$auto(0x1, 0x7) 6m4.589842235s ago: executing program 3 (id=2748): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/arp\x00', 0x60000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000000)=""/223, 0xdf) 6m4.197328241s ago: executing program 32 (id=2748): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/arp\x00', 0x60000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000000)=""/223, 0xdf) 4m7.637129849s ago: executing program 1 (id=5011): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000240)={0x2, 0x6b7f, 0x9, 0x8}) 4m7.42465005s ago: executing program 1 (id=5016): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000780)={0x3, 0x2a2ac88b, 0x7f6, @raw=0x3, &(0x7f0000000000)={@raw=0x400, 0xdb, 0x7ff, 0x1, "6e004d1987a7e6375fef02e5712e8ec96d2a965016541142235c3f5b5fb7cd63cdff01187c9d5f15d0105705"}, "e7a6b861dcbde9deb2c11f7e019b498d171b0cd6555901db83a25536fc1f5662819ab1220e23b007fe795ca45f29f0c2a7f7"}) 4m7.254462788s ago: executing program 1 (id=5020): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_udc.2/udc/dummy_udc.2/a_alt_hnp_support\x00', 0x2000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001c00)=""/4111, 0x100f) 4m7.083574633s ago: executing program 1 (id=5023): r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x49, 0x0, 0x1) 4m6.921749047s ago: executing program 1 (id=5026): tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) 4m6.360680734s ago: executing program 1 (id=5033): r0 = socket(0x2, 0x1, 0x0) getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0) 4m5.932979866s ago: executing program 33 (id=5033): r0 = socket(0x2, 0x1, 0x0) getsockopt$auto(r0, 0x0, 0xcf, 0x0, 0x0) 3m9.635082233s ago: executing program 2 (id=5936): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x16bd00, 0x0) pread64$auto(r0, 0x0, 0x100000001, 0x400000000000100) 3m9.411680454s ago: executing program 2 (id=5941): r0 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x183681, 0x0) writev$auto(r0, &(0x7f0000000140)={&(0x7f00000000c0), 0x2}, 0xa) 3m9.271053511s ago: executing program 2 (id=5945): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x6) 3m9.105143091s ago: executing program 2 (id=5949): r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/bssid\x00', 0x0, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r0, 0x0, 0x0) 3m8.887398897s ago: executing program 2 (id=5954): ioperm$auto(0xd44, 0x6, 0x8) tkill$auto(0x80000000000001, 0x7) 3m8.665296845s ago: executing program 2 (id=5958): socket(0x15, 0x5, 0x0) setsockopt$auto(0x3, 0x114, 0x2, 0xfffffffffffffffe, 0xa0) 3m8.284655568s ago: executing program 34 (id=5958): socket(0x15, 0x5, 0x0) setsockopt$auto(0x3, 0x114, 0x2, 0xfffffffffffffffe, 0xa0) 1.945152269s ago: executing program 6 (id=8053): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card0/pcm0p/oss\x00', 0x8f3b7a51b80ebc01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f00000003c0)="22e030b1f1193fd495b7432f5493d1187f016e4838a0a6c56fbfa2f370311662e39dc20de5c1184cf39787ac657b4a454b6ba4d1ee", 0x35) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 1.817107068s ago: executing program 5 (id=8055): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x2, 0x1001, 0x1, 0x1, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 1.757660592s ago: executing program 0 (id=8056): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/task_delayacct\x00', 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0x80) 1.601106218s ago: executing program 6 (id=8057): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004180), r0) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f00000041c0)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x4}, @OVS_VPORT_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x80) 1.540952268s ago: executing program 4 (id=8058): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='*\x00%i'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1.397326791s ago: executing program 0 (id=8059): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r0, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_FLAGS={0x8, 0x4, 0x1}, @HWSIM_ATTR_ADDR_TRANSMITTER={0xa, 0x2, "a060292f83d9"}, @HWSIM_ATTR_COOKIE={0xc}, @HWSIM_ATTR_SIGNAL={0x8, 0x6, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) 1.350088948s ago: executing program 5 (id=8060): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r1, 0x170b, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_STATS_SRC={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40840}, 0x4000840) 1.282059157s ago: executing program 6 (id=8061): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x4000000, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) 1.22593829s ago: executing program 4 (id=8062): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.7/usb8/interface_authorized_default\x00', 0xc2481, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 1.075304925s ago: executing program 0 (id=8063): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = set_tid_address$auto(0x0) capset$auto(&(0x7f0000000040)={0x19980330, r0}, 0x0) 976.697374ms ago: executing program 5 (id=8064): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) ioperm$auto(0x7, 0x6, 0x2) move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2) 917.14435ms ago: executing program 4 (id=8065): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r1, 0x915, 0x70bd29, 0x25dfdbfc, {}, [@TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, @TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4008c) 837.019461ms ago: executing program 6 (id=8066): mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x7, 0x0, 0x4) 727.562304ms ago: executing program 0 (id=8067): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mtd0\x00', 0x1, 0x0) ioctl$auto_MEMERASE64(r0, 0x40104d14, 0x0) 673.994117ms ago: executing program 5 (id=8068): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon26\x00', 0x40000, 0x0) ioctl$auto_MON_IOCG_STATS(r0, 0x80089203, 0xffffffffffffffff) 595.632326ms ago: executing program 4 (id=8069): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r0, 0x8000450a, r0) 498.500245ms ago: executing program 6 (id=8070): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) process_vm_writev$auto(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x4, 0x0) 416.888987ms ago: executing program 0 (id=8071): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) bpf$auto(0x0, &(0x7f00000003c0)=@link_update={0xa, @new_prog_fd=r0, 0x7, @old_map_fd}, 0x1ff) 357.034976ms ago: executing program 5 (id=8072): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) msync$auto(0x1ffff000, 0x0, 0x400000004) 263.758368ms ago: executing program 4 (id=8073): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd25, 0x25dfdc00, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x100) 195.333678ms ago: executing program 6 (id=8074): socket(0xa, 0x801, 0x106) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 130.905243ms ago: executing program 0 (id=8075): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) ioctl$auto_SG_SET_RESERVED_SIZE2(r0, 0x2275, &(0x7f0000000040)="d93ca7") ioctl$auto_SG_SET_RESERVED_SIZE2(r0, 0x2275, &(0x7f0000000080)="b25fa5") 61.935794ms ago: executing program 5 (id=8076): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x76, 0x0, 0x8) 0s ago: executing program 4 (id=8077): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002ec0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000040)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x10}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x24000802) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.41' (ED25519) to the list of known hosts. [ 97.165901][ T1209] cfg80211: failed to load regulatory.db [ 100.972973][ T5817] cgroup: Unknown subsys name 'net' [ 101.149012][ T5817] cgroup: Unknown subsys name 'cpuset' [ 101.160280][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 102.991820][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 105.259727][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.268538][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.276614][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.278127][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 105.285001][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.295246][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 105.299955][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 105.315334][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 105.331593][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 105.340443][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 105.349077][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 105.357565][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.357924][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 105.373496][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.382576][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.394607][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.402499][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.419223][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 105.429278][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 105.440227][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.003447][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 106.046050][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 106.121876][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 106.299153][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 106.332300][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.339992][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.347942][ T5830] bridge_slave_0: entered allmulticast mode [ 106.355801][ T5830] bridge_slave_0: entered promiscuous mode [ 106.408010][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.415374][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.422575][ T5830] bridge_slave_1: entered allmulticast mode [ 106.430826][ T5830] bridge_slave_1: entered promiscuous mode [ 106.448801][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.456039][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.463605][ T5831] bridge_slave_0: entered allmulticast mode [ 106.471890][ T5831] bridge_slave_0: entered promiscuous mode [ 106.521834][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.529336][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.537152][ T5831] bridge_slave_1: entered allmulticast mode [ 106.544726][ T5831] bridge_slave_1: entered promiscuous mode [ 106.618969][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.626712][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.634439][ T5828] bridge_slave_0: entered allmulticast mode [ 106.641952][ T5828] bridge_slave_0: entered promiscuous mode [ 106.653559][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.671772][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.681782][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.689518][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.697533][ T5828] bridge_slave_1: entered allmulticast mode [ 106.705990][ T5828] bridge_slave_1: entered promiscuous mode [ 106.715460][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.749966][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.856330][ T5830] team0: Port device team_slave_0 added [ 106.870264][ T5830] team0: Port device team_slave_1 added [ 106.877714][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.885192][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.892428][ T5829] bridge_slave_0: entered allmulticast mode [ 106.900724][ T5829] bridge_slave_0: entered promiscuous mode [ 106.930289][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.945792][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.971414][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.979290][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.986741][ T5829] bridge_slave_1: entered allmulticast mode [ 106.994532][ T5829] bridge_slave_1: entered promiscuous mode [ 107.005778][ T5831] team0: Port device team_slave_0 added [ 107.057612][ T5831] team0: Port device team_slave_1 added [ 107.099212][ T5828] team0: Port device team_slave_0 added [ 107.106515][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.113863][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.139985][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.182688][ T5828] team0: Port device team_slave_1 added [ 107.189831][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.197371][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.223371][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.248021][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.261753][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.272699][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.280564][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.306866][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.319710][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.326827][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.335791][ T5840] Bluetooth: hci3: command tx timeout [ 107.352857][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.389793][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.396890][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.423454][ T5840] Bluetooth: hci2: command tx timeout [ 107.427280][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.475098][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.482105][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.508284][ T5840] Bluetooth: hci1: command tx timeout [ 107.508518][ T5840] Bluetooth: hci0: command tx timeout [ 107.518073][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.550018][ T5829] team0: Port device team_slave_0 added [ 107.583677][ T5829] team0: Port device team_slave_1 added [ 107.598236][ T5830] hsr_slave_0: entered promiscuous mode [ 107.605079][ T5830] hsr_slave_1: entered promiscuous mode [ 107.726944][ T5831] hsr_slave_0: entered promiscuous mode [ 107.734367][ T5831] hsr_slave_1: entered promiscuous mode [ 107.740703][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.749438][ T5831] Cannot create hsr debugfs directory [ 107.764205][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.771219][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.799604][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.817804][ T5828] hsr_slave_0: entered promiscuous mode [ 107.824539][ T5828] hsr_slave_1: entered promiscuous mode [ 107.830657][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.838338][ T5828] Cannot create hsr debugfs directory [ 107.861208][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.868473][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.894971][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.059588][ T5829] hsr_slave_0: entered promiscuous mode [ 108.066876][ T5829] hsr_slave_1: entered promiscuous mode [ 108.073163][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.080828][ T5829] Cannot create hsr debugfs directory [ 108.495549][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.512703][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.525092][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.549185][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.620427][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.650718][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.687119][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 108.699124][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.754259][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.776994][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.799545][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.810518][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.931430][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.957940][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.965557][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.978732][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.990992][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 109.089149][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.142693][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.150118][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.191570][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.198841][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.231589][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.290382][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.310084][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.367680][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.404999][ T5840] Bluetooth: hci3: command tx timeout [ 109.410279][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.417617][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.429991][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.437337][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.452168][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.467359][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.474583][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.486692][ T5840] Bluetooth: hci2: command tx timeout [ 109.512253][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.519495][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.563898][ T5840] Bluetooth: hci1: command tx timeout [ 109.569217][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.574021][ T5840] Bluetooth: hci0: command tx timeout [ 109.620671][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.628052][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.682975][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.690318][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.999743][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.152339][ T5830] veth0_vlan: entered promiscuous mode [ 110.191896][ T5830] veth1_vlan: entered promiscuous mode [ 110.282061][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.351151][ T5830] veth0_macvtap: entered promiscuous mode [ 110.362907][ T5830] veth1_macvtap: entered promiscuous mode [ 110.387116][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.410553][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.444970][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.486415][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.515849][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.525540][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.535305][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.545499][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.578513][ T5831] veth0_vlan: entered promiscuous mode [ 110.637382][ T5831] veth1_vlan: entered promiscuous mode [ 110.660943][ T5828] veth0_vlan: entered promiscuous mode [ 110.701908][ T5829] veth0_vlan: entered promiscuous mode [ 110.760279][ T5828] veth1_vlan: entered promiscuous mode [ 110.772151][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.795402][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.807881][ T5829] veth1_vlan: entered promiscuous mode [ 110.868415][ T5831] veth0_macvtap: entered promiscuous mode [ 110.888884][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.891562][ T5831] veth1_macvtap: entered promiscuous mode [ 110.903398][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.976093][ T5829] veth0_macvtap: entered promiscuous mode [ 110.988323][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.000020][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.015118][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.028624][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.040832][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.053839][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 111.055712][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.078882][ T5829] veth1_macvtap: entered promiscuous mode [ 111.098073][ T5828] veth0_macvtap: entered promiscuous mode [ 111.118390][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.132754][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.142416][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.153416][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.177320][ T5828] veth1_macvtap: entered promiscuous mode [ 111.260452][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.277621][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.289499][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.312261][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.339888][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.352066][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.364772][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.376791][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.388713][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.400903][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.419767][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.452749][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.483482][ T5840] Bluetooth: hci3: command tx timeout [ 111.489308][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.501079][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.523255][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.543610][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.558662][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.567283][ T5840] Bluetooth: hci2: command tx timeout [ 111.602969][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.635303][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.646829][ T5840] Bluetooth: hci0: command tx timeout [ 111.646876][ T5835] Bluetooth: hci1: command tx timeout [ 111.663545][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.674665][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.685401][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.697043][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.709939][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.745809][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.773520][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.782575][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.799943][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.830699][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.846552][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.856341][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.867808][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.932297][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.955599][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.116177][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.141730][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.204965][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.212867][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.314203][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.343361][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.408722][ T3545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.441739][ T3545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.545851][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.580667][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.563876][ T5835] Bluetooth: hci3: command tx timeout [ 113.649779][ T5835] Bluetooth: hci2: command tx timeout [ 113.658690][ T5835] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 113.723810][ T5835] Bluetooth: hci0: command tx timeout [ 113.724529][ T5840] Bluetooth: hci1: command tx timeout [ 113.743745][ T30] audit: type=1800 audit(1746020175.050:2): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.29" name="members" dev="configfs" ino=6840 res=0 errno=0 [ 115.187168][ T5993] ptrace attach of "./syz-executor exec"[5828] was attempted by "./syz-executor exec"[5993] [ 117.513619][ T6075] capability: warning: `syz.0.94' uses 32-bit capabilities (legacy support in use) [ 122.196935][ T6251] ======================================================= [ 122.196935][ T6251] WARNING: The mand mount option has been deprecated and [ 122.196935][ T6251] and is ignored by this kernel. Remove the mand [ 122.196935][ T6251] option from the mount to silence this warning. [ 122.196935][ T6251] ======================================================= [ 123.762016][ T30] audit: type=1800 audit(4294968326.173:3): pid=6306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.208" name="trace_pipe" dev="tracefs" ino=188 res=0 errno=0 [ 124.055986][ T6314] syz_tun: tun_chr_ioctl cmd 9 [ 124.326274][ T6322] Unable to find swap-space signature [ 124.362030][ T6326] mmap: syz.0.217 (6326) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 124.638038][ T30] audit: type=1800 audit(4294968327.043:4): pid=6336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.223" name="trace_pipe" dev="tracefs" ino=146 res=0 errno=0 [ 127.167134][ T6427] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[6427] [ 130.226234][ T6542] capability: warning: `syz.3.326' uses deprecated v2 capabilities in a way that may be insecure [ 134.196788][ T6677] syz_tun: tun_chr_ioctl cmd 1074025678 [ 134.202528][ T6677] syz_tun: group set to 3 [ 135.374784][ T6648] kexec: Could not allocate control_code_buffer [ 135.529599][ T6719] nfs: Bad value for 'source' [ 135.579649][ T6722] syz.1.411(6722): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 138.137110][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.143960][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.224396][ T6823] Process accounting resumed [ 139.479308][ T5840] Bluetooth: hci1: unexpected event 0x23 length: 127 > 13 [ 139.517837][ T5840] Bluetooth: hci0: unexpected subevent 0x03 length: 253 > 9 [ 139.759041][ T30] audit: type=1800 audit(4294969369.176:5): pid=6884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.490" name="members" dev="configfs" ino=9200 res=0 errno=0 [ 140.120650][ T6894] Process accounting resumed [ 145.310222][ T7093] Process accounting resumed [ 146.043020][ T7115] Process accounting resumed [ 146.818372][ T7148] Process accounting resumed [ 146.884736][ T5840] Bluetooth: hci2: unexpected event 0x17 length: 123 > 6 [ 148.077874][ T30] audit: type=1800 audit(4294969377.496:6): pid=7204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.647" name="discovery_nqn" dev="configfs" ino=10744 res=0 errno=0 [ 149.142970][ T7248] syz_tun: tun_chr_ioctl cmd 4294967291 [ 151.168884][ T7328] Unable to find swap-space signature [ 152.172200][ T7367] __vm_enough_memory: pid: 7367, comm: syz.0.727, bytes: 4398046511104 not enough memory for the allocation [ 154.182050][ T7440] can: request_module (can-proto-3) failed. [ 156.615712][ T5840] Bluetooth: hci0: unexpected event 0x20 length: 123 > 7 [ 157.105481][ T7552] syz.0.818 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 157.388699][ T30] audit: type=1800 audit(4294969386.786:7): pid=7563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.825" name="dbroot" dev="configfs" ino=12033 res=0 errno=0 [ 160.401204][ T30] audit: type=1800 audit(4294969389.816:8): pid=7670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.876" name="dummy_udc" dev="gadgetfs" ino=5665 res=0 errno=0 [ 160.421782][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.362435][ T7918] syz_tun: tun_chr_ioctl cmd 1074025721 [ 168.385917][ T7953] Process accounting paused [ 169.712767][ T8008] ima: policy update failed [ 169.740151][ T30] audit: type=1802 audit(1025.210:9): pid=8008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1045" res=0 errno=0 [ 175.325723][ T8261] Process accounting paused [ 176.141472][ T8305] Process accounting paused [ 176.833180][ T8333] Process accounting paused [ 177.866497][ T8383] futex_wake_op: syz.3.1230 tries to shift op by 64; fix this program [ 179.160444][ T8444] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 180.282201][ T8497] syz_tun: tun_chr_ioctl cmd 1074025680 [ 181.608322][ T30] audit: type=1326 audit(1037.080:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.2.1318" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f90ca78e969 code=0x0 [ 183.730377][ T8662] random: crng reseeded on system resumption [ 186.795013][ T30] audit: type=1800 audit(1042.260:11): pid=8785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1428" name="version" dev="configfs" ino=15874 res=0 errno=0 [ 189.680476][ T5840] Bluetooth: hci3: Malformed LE Event: 0x0b [ 190.788340][ T8950] random: crng reseeded on system resumption [ 191.824949][ T8994] random: crng reseeded on system resumption [ 192.810774][ T9032] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 193.622366][ T9064] syz_tun: tun_chr_ioctl cmd 2147767519 [ 194.000459][ T9084] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.1577' sets config #5 [ 194.393666][ T30] audit: type=1800 audit(1049.860:12): pid=9102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1586" name="lu_gp_id" dev="configfs" ino=16651 res=0 errno=0 [ 194.423928][ T9102] kstrtoul() returned -22 for lu_gp_id [ 194.736881][ T9119] i2c i2c-0: delete_device: Extra parameters [ 195.658756][ T9162] : Can't lookup blockdev [ 196.455584][ T9206] syz_tun: tun_chr_ioctl cmd 1074812117 [ 197.392748][ T9252] syz_tun: tun_chr_ioctl cmd 35111 [ 198.061776][ T9278] kAFS: Invalid Command on /proc/fs/afs/cells file [ 198.552555][ T9294] Process accounting resumed [ 199.572168][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.584554][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.343947][ T9390] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 200.344877][ T9389] ima: policy update failed [ 200.359105][ T30] audit: type=1802 audit(1055.840:13): pid=9389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1726" res=0 errno=0 [ 202.270433][ T9480] kafs: addr_prefs: Invalid Command [ 202.895175][ T9511] bond0: option lp_interval: invalid value (/sys/devices/platform/vkms/graphics/fb0/rotate) [ 202.951528][ T9511] bond0: option lp_interval: allowed values 1 - 2147483647 [ 205.683169][ T30] audit: type=1800 audit(1061.150:14): pid=9652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1855" name="discovery_nqn" dev="configfs" ino=18304 res=0 errno=0 [ 206.295962][ T9675] Process accounting resumed [ 206.932107][ T9708] Process accounting resumed [ 207.009332][ T9716] Setting dangerous option i915.mitigations - tainting kernel [ 207.040850][ T9716] Bad "i915.mitigations=!h@S", 'h@S' is unknown [ 207.926796][ T9761] syz.3.1910 uses obsolete (PF_INET,SOCK_PACKET) [ 208.279661][ T9777] Setting dangerous option i915.mitigations - tainting kernel [ 213.012654][ T9996] process 'syz.3.2027' launched '/dev/fd/3' with NULL argv: empty string added [ 213.678781][T10029] block2mtd: illegal erase size [ 213.889707][T10039] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 217.288703][T10195] program syz.1.2126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.660582][T10212] Setting dangerous option i915.mitigations - tainting kernel [ 219.000455][T10234] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 219.170355][T10277] syz_tun: tun_chr_ioctl cmd 2147767506 [ 219.339885][T10284] ICMPv6: process `syz.3.2170' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 220.731710][T10349] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 222.181968][T10407] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 222.196375][T10409] syz.2.2229 (10409): drop_caches: 0 [ 223.680551][T10457] sysfs_service_op_store: Client not running :-5: [ 226.297885][ T30] audit: type=1400 audit(1081.770:15): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=10559 comm="syz.2.2302" [ 228.452987][T10647] warning: `syz.3.2347' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 228.723923][T10654] Process accounting paused [ 229.036022][ T30] audit: type=1800 audit(1084.500:16): pid=10674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2359" name="SYSV00000014" dev="hugetlbfs" ino=0 res=0 errno=0 [ 230.853835][T10748] zram: Added device: zram1 [ 230.980162][T10755] udc dummy_udc.0: soft-connect without a gadget driver [ 232.369384][ T5141] Bluetooth: hci3: command 0x0406 tx timeout [ 232.375499][ T5141] Bluetooth: hci0: command 0x0406 tx timeout [ 232.382257][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 232.382290][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 233.039891][T10837] i2c i2c-0: new_device: Missing parameters [ 233.853864][T10874] usb usb24: check_ctrlrecip: process 10874 (syz.3.2456) requesting ep 01 but needs 81 [ 233.879362][T10874] usb usb24: usbfs: process 10874 (syz.3.2456) did not claim interface 0 before use [ 235.042470][T10929] WARNING! power/level is deprecated; use power/control instead [ 235.826616][ T5832] Bluetooth: hci0: unexpected event 0x3e length: 728 > 260 [ 235.826668][ T5832] Bluetooth: hci0: unexpected subevent 0x03 length: 727 > 9 [ 236.389143][T10994] Process accounting paused [ 237.036581][T11026] Process accounting paused [ 239.307917][T11141] ptrace attach of "./syz-executor exec"[5829] was attempted by ""[11141] [ 239.734527][T11165] bcache: register_bcache() error : failed to open device [ 239.988511][T11175] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 241.436367][T11224] i2c i2c-0: new_device: Invalid device name [ 245.376348][T11368] ptrace attach of "./syz-executor exec"[5830] was attempted by "./syz-executor exec"[11368] [ 248.402416][ T3545] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.535864][ T3545] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.614306][ T3545] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.777951][ T3545] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.233597][ T3545] bridge_slave_1: left allmulticast mode [ 249.256383][ T3545] bridge_slave_1: left promiscuous mode [ 249.278398][ T3545] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.372164][ T3545] bridge_slave_0: left allmulticast mode [ 249.395228][ T3545] bridge_slave_0: left promiscuous mode [ 249.412133][ T3545] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.562804][T11514] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 249.599209][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 249.623672][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 249.636889][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 249.649537][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 249.673311][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 250.721320][ T3545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.776949][ T3545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.808649][ T3545] bond0 (unregistering): Released all slaves [ 251.737716][ T5832] Bluetooth: hci3: command tx timeout [ 251.796439][ T3545] hsr_slave_0: left promiscuous mode [ 251.819678][ T3545] hsr_slave_1: left promiscuous mode [ 251.836343][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.843880][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.904550][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.924075][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.054417][ T3545] veth1_macvtap: left promiscuous mode [ 252.080091][ T3545] veth0_macvtap: left promiscuous mode [ 252.085923][ T3545] veth1_vlan: left promiscuous mode [ 252.103596][ T3545] veth0_vlan: left promiscuous mode [ 252.346426][T11620] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 252.418001][T11620] CIFS mount error: No usable UNC path provided in device string! [ 252.418001][T11620] [ 252.457276][T11620] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 253.549636][ T3545] team0 (unregistering): Port device team_slave_1 removed [ 253.652686][ T3545] team0 (unregistering): Port device team_slave_0 removed [ 253.811419][ T5832] Bluetooth: hci3: command tx timeout [ 254.482670][T11516] chnl_net:caif_netlink_parms(): no params data found [ 254.608345][T11691] usbcore.quirks: string doesn't fit in 127 chars. [ 255.018005][T11516] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.025350][T11516] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.056973][T11516] bridge_slave_0: entered allmulticast mode [ 255.065039][T11516] bridge_slave_0: entered promiscuous mode [ 255.091533][T11516] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.136352][T11516] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.168229][T11516] bridge_slave_1: entered allmulticast mode [ 255.206369][T11516] bridge_slave_1: entered promiscuous mode [ 255.372613][T11516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.410042][T11516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.640891][T11516] team0: Port device team_slave_0 added [ 255.670313][T11516] team0: Port device team_slave_1 added [ 255.892862][ T5832] Bluetooth: hci3: command tx timeout [ 255.919078][T11516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.946471][T11516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.974659][T11516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.029315][T11516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.066562][T11516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.118732][T11516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.261864][T11516] hsr_slave_0: entered promiscuous mode [ 256.285362][T11516] hsr_slave_1: entered promiscuous mode [ 256.299105][T11516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.308033][T11516] Cannot create hsr debugfs directory [ 256.984647][T11516] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 257.045084][T11516] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 257.082591][T11516] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 257.121271][T11516] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 257.472983][T11516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.554847][T11516] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.604701][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.611980][ T3545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.666748][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.673973][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.830825][T11516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.986266][ T5832] Bluetooth: hci3: command tx timeout [ 258.402809][T11516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.141770][T11872] binder: 11871:11872 ioctl c00c620f 2000000000c0 returned -22 [ 259.290403][T11516] veth0_vlan: entered promiscuous mode [ 259.339571][T11516] veth1_vlan: entered promiscuous mode [ 259.473212][T11516] veth0_macvtap: entered promiscuous mode [ 259.519834][T11516] veth1_macvtap: entered promiscuous mode [ 259.580892][T11516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.612464][T11516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.638090][T11516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.675928][T11516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.693066][T11516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.724932][T11516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.758768][T11516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.837942][T11516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.866258][T11516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.887084][T11516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.916368][T11516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.927083][T11516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.947857][T11516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.988711][T11516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.035843][T11516] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.086241][T11516] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.116346][T11516] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.125136][T11516] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.484212][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.506341][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.612438][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.627538][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.015031][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.022677][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.248975][T12034] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 263.248975][T12034] [ 263.786315][T12054] ecryptfs_parse_packet_length: Error parsing packet length [ 263.859337][T12054] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 264.122124][T12066] rnbd_client L213: map_device: Parameters missing [ 264.567165][T12088] aoe: can't write to that file. [ 264.813021][T12098] kafs: addr_prefs: Invalid Command [ 265.530683][T12116] cougar: G6 mapped to F18 [ 266.625543][T12149] Process accounting resumed [ 267.075606][T12166] Process accounting resumed [ 267.147865][T12173] synth uevent: /bus/memstick: unknown uevent action string [ 267.218372][T12176] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 267.218372][T12176] program syz.0.3010 not setting count and/or reply_len properly [ 269.538500][T12259] queue_state_write: unsupported operation '' [ 269.547517][T12259] queue_state_write: use 'run', 'start' or 'kick' [ 273.007400][T12421] kAFS: unparsable volume name [ 273.311344][T12431] zswap: compressor Ȯ9Qz%;0*lH`Bkjwjӳ<85'.Y[`2Y$`Yvgִq"b%zN[O EiFi(Sh3Kx>ԝRS=kHɟ{?Bbޝ4)> not available [ 275.770906][T12526] block2mtd: parameter too long [ 276.415333][ T30] audit: type=1800 audit(1131.880:17): pid=12555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3183" name="dbroot" dev="configfs" ino=27344 res=0 errno=0 [ 276.473751][T12555] db_root: not a directory: /dev/audio1 [ 279.278214][T12655] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 281.094259][ T30] audit: type=1800 audit(1136.560:18): pid=12742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3250" name="features" dev="configfs" ino=28478 res=0 errno=0 [ 282.474948][T12811] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 283.722951][T12871] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 283.724964][T12869] ima: policy update failed [ 283.762533][ T30] audit: type=1802 audit(1139.220:19): pid=12869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3298" res=0 errno=0 [ 287.037764][T12986] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 287.044221][T12986] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 287.144061][T12986] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 287.168534][T12986] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 287.187272][T12986] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 287.193516][T12986] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 287.212471][T12986] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 287.237582][T12986] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 287.278580][T12986] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 288.307502][T13052] Format for deleting device is "id" (uint). [ 288.451987][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 289.088843][T13083] Ignoring unsupported numa_zonelist_order value: [ 289.088843][T13083] [ 289.134856][T13085] : Can't lookup blockdev [ 289.167286][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 289.256384][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 289.256499][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 290.537283][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 290.841287][T13143] ima: policy update failed [ 290.860533][ T30] audit: type=1802 audit(1146.330:20): pid=13143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3418" res=0 errno=0 [ 291.247641][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 291.326346][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 291.329953][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 293.406233][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 293.491158][T13250] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 293.529137][T13250] ep_00: uevent: failed to send synthetic uevent: -22 [ 294.582648][T13287] Setting dangerous option i915.mitigations - tainting kernel [ 295.330210][T13320] Invalid ELF header magic: != ELF [ 295.593532][T13299] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 295.606427][T13299] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 295.628649][T13299] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 295.641467][T13299] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 296.742411][T13383] Process accounting paused [ 296.854433][T13387] Invalid ELF header magic: != ELF [ 296.926234][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 297.091889][T13398] Process accounting paused [ 297.646719][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 297.648279][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 297.653450][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 298.457389][T13431] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 298.464510][T13431] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 298.474102][T13431] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 298.486534][T13431] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 298.525832][T13468] Invalid ELF header magic: != ELF [ 300.018357][T13501] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 300.038459][T13501] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 300.045174][T13501] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 300.061196][T13501] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 300.160843][T13537] tipc: Can't bind to reserved service type 1 [ 301.284897][T13591] zram0: detected capacity change from 0 to 8 [ 301.326416][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 302.046329][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 302.054025][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 302.127928][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 302.396350][T13624] ima: policy update failed [ 302.396537][ T30] audit: type=1802 audit(1157.870:21): pid=13624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.3644" res=0 errno=0 [ 304.034282][T13705] nvme_fcloop: unknown parameter or missing value '^/]' [ 304.289609][T13677] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 304.310680][T13677] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 304.327033][T13677] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 304.333270][T13677] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 305.646556][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 306.380293][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 306.380325][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 306.387683][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 307.546438][T13803] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 307.554375][T13803] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 307.571860][T13803] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 307.596463][T13803] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 308.927878][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 309.567943][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 309.648777][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 309.654893][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 311.016952][T13907] bond0: no command found in slaves file - use +ifname or -ifname [ 311.800328][T13928] i2c i2c-0: new_device: Can't parse I2C address [ 312.566752][ T30] audit: type=1806 audit(1168.030:22): xattr="" res=-22 [ 313.121449][T13940] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 313.136764][T13940] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 313.150699][T13940] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 313.176550][T13940] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 313.843995][T13992] sysfs_service_op_show: Client not running :-5: [ 314.080024][T14003] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 314.295814][T14012] ubi0: attaching mtd0 [ 314.316230][T14012] ubi0 error: ubi_attach_mtd_dev: bad VID header (3969) or data offsets (4033) [ 314.526380][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 315.167354][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 315.173629][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 315.249425][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 316.428823][ T30] audit: type=1400 audit(1171.900:23): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=14113 comm="syz.4.3879" [ 319.220949][T14249] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 321.282690][T14341] i2c i2c-0: delete_device: Can't find device in list [ 322.450886][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.457514][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.912473][T14414] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 323.790199][T14457] [ 326.800104][T14601] Process accounting resumed [ 327.195198][T14622] Process accounting resumed [ 331.172399][T14824] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 331.964265][T14864] block2mtd: illegal erase size [ 332.624194][ T30] audit: type=1800 audit(1188.090:24): pid=14896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4261" name="members" dev="configfs" ino=35927 res=0 errno=0 [ 334.878350][T15003] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.021563][T15003] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.151771][T15003] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.323359][T15003] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.328142][T15116] ICMPv6: process `syz.1.4368' is using deprecated sysctl (syscall) net.ipv6.neigh.macsec0.base_reachable_time - use net.ipv6.neigh.macsec0.base_reachable_time_ms instead [ 337.489316][T15120] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.981113][T15144] program syz.4.4380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.936702][T15182] writes to the poll attribute are ignored. [ 338.956388][T15182] please use driver specific parameters instead. [ 341.104512][T15293] vivid-003: ================= START STATUS ================= [ 341.121325][T15293] vivid-003: Radio HW Seek Mode: Bounded [ 341.128278][T15293] vivid-003: Radio Programmable HW Seek: false [ 341.135620][T15293] vivid-003: RDS Rx I/O Mode: Block I/O [ 341.148502][T15293] vivid-003: Generate RBDS Instead of RDS: false [ 341.155486][T15293] vivid-003: RDS Reception: true [ 341.164544][T15293] vivid-003: RDS Program Type: 0 inactive [ 341.196332][T15293] vivid-003: RDS PS Name: inactive [ 341.213844][T15293] vivid-003: RDS Radio Text: inactive [ 341.236154][T15293] vivid-003: RDS Traffic Announcement: false inactive [ 341.243656][T15293] vivid-003: RDS Traffic Program: false inactive [ 341.280517][T15293] vivid-003: RDS Music: false inactive [ 341.286309][T15293] vivid-003: ================== END STATUS ================== [ 345.207730][T15496] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 346.059304][T15538] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 346.059304][T15538] M' is too long [ 346.127191][T15538] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 346.127191][T15538] W ' is too long [ 346.443064][T15551] aoe: invalid device specification [ 347.306348][T15595] Debayer A: ================= START STATUS ================= [ 347.326833][T15595] Debayer A: Debayer Mean Window Size: 3 [ 347.333464][T15595] Debayer A: ================== END STATUS ================== [ 348.586162][ T30] audit: type=1807 audit(1204.050:25): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 348.591529][T15652] ima: policy update failed [ 348.626148][ T30] audit: type=1802 audit(1204.050:26): pid=15653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.4630" res=0 errno=0 [ 348.676395][ T30] audit: type=1802 audit(1204.080:27): pid=15652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.4630" res=0 errno=0 [ 349.425164][T15694] ICMPv6: process `syz.0.4651' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 349.875977][T15717] kafs: addr_prefs: Too many elements in string [ 350.231120][T15734] bond0: option mode: unable to set because the bond device is up [ 350.591119][T15754] ubi0: attaching mtd0 [ 350.633754][T15754] ubi0: scanning is finished [ 350.673766][T15754] ubi0: empty MTD device detected [ 350.679825][T15754] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 350.920532][T15754] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 354.634522][T15947] ubi0: attaching mtd0 [ 354.644039][T15947] ubi0: scanning is finished [ 354.668821][T15947] ubi0: empty MTD device detected [ 354.673998][T15947] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 354.815487][T15947] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 355.120264][T15967] kmem.limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 356.151614][T16021] kAFS: Invalid Command on /proc/fs/afs/cells file [ 356.919833][T16051] Process accounting paused [ 357.283493][T16071] Process accounting paused [ 357.559945][T16089] program syz.0.4847 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 358.542758][T16134] syz_tun: tun_chr_ioctl cmd 2147767511 [ 358.924077][T16153] zram0: detected capacity change from 8 to 0 [ 360.281349][T16216] [ 360.488854][T16227] Scaler: ================= START STATUS ================= [ 360.500980][T16227] Scaler: ================== END STATUS ================== [ 362.226557][T16296] aoe: copy from user failed [ 362.231336][T16296] aoe: could not set interface list: too many interfaces [ 363.922927][ T30] audit: type=1806 audit(1219.390:28): xattr=2EC7871B res=-22 [ 363.975108][T16368] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 366.688373][ T1098] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.832466][ T1098] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.029773][ T1098] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.219275][ T1098] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.638017][ T1098] bridge_slave_1: left allmulticast mode [ 367.643749][ T1098] bridge_slave_1: left promiscuous mode [ 367.680165][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.755266][ T1098] bridge_slave_0: left allmulticast mode [ 367.774777][ T1098] bridge_slave_0: left promiscuous mode [ 367.797150][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.912189][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 367.924828][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 367.936001][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 367.946492][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 367.959853][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 368.061094][T16511] misc userio: Invalid payload size [ 368.546636][T16530] ceph: Failed to parse sending metrics switch value 'P^' [ 369.453026][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.482463][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.504933][ T1098] bond0 (unregistering): Released all slaves [ 369.738423][T16575] program syz.2.5076 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 370.046613][ T5840] Bluetooth: hci1: command tx timeout [ 370.276671][ T1098] hsr_slave_0: left promiscuous mode [ 370.292593][ T1098] hsr_slave_1: left promiscuous mode [ 370.326925][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.334457][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.367485][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.374977][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.510619][ T1098] veth1_macvtap: left promiscuous mode [ 370.540397][ T1098] veth0_macvtap: left promiscuous mode [ 370.568233][ T1098] veth1_vlan: left promiscuous mode [ 370.573681][ T1098] veth0_vlan: left promiscuous mode [ 371.129196][T16626] deleting an unspecified loop device is not supported. [ 372.030669][ T5903] Process accounting resumed [ 372.129155][ T5840] Bluetooth: hci1: command tx timeout [ 372.343491][ T1098] team0 (unregistering): Port device team_slave_1 removed [ 372.497192][ T1098] team0 (unregistering): Port device team_slave_0 removed [ 373.272714][T16710] usb usb15: usbfs: process 16710 (syz.4.5136) did not claim interface 0 before use [ 374.206446][ T5840] Bluetooth: hci1: command tx timeout [ 374.396593][T16506] chnl_net:caif_netlink_parms(): no params data found [ 374.916346][T16506] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.923729][T16506] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.944341][T16506] bridge_slave_0: entered allmulticast mode [ 374.953604][T16506] bridge_slave_0: entered promiscuous mode [ 374.987260][T16506] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.995566][T16506] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.005505][T16506] bridge_slave_1: entered allmulticast mode [ 375.028099][T16506] bridge_slave_1: entered promiscuous mode [ 375.209724][T16506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.231789][T16785] i2c i2c-0: delete_device: Can't parse I2C address [ 375.246569][T16506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.397276][T16506] team0: Port device team_slave_0 added [ 375.419059][T16506] team0: Port device team_slave_1 added [ 375.593731][T16506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.619409][T16506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.693661][T16506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.752295][T16506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.775536][T16506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.831689][T16506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.988231][T16506] hsr_slave_0: entered promiscuous mode [ 375.995139][T16506] hsr_slave_1: entered promiscuous mode [ 376.012053][T16506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.033891][T16506] Cannot create hsr debugfs directory [ 376.287640][ T5840] Bluetooth: hci1: command tx timeout [ 376.897514][T16506] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 376.935876][T16506] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 376.968740][T16506] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 377.001895][T16506] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 377.219223][ T5840] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 377.464214][T16506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.507850][T16506] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.539863][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.547138][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.590243][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.597641][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.635257][T16506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.734923][T16909] delete_channel: no stack [ 379.441279][T16506] veth0_vlan: entered promiscuous mode [ 379.494665][T16506] veth1_vlan: entered promiscuous mode [ 379.639523][T16506] veth0_macvtap: entered promiscuous mode [ 379.685682][T16506] veth1_macvtap: entered promiscuous mode [ 379.757940][T16506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.782471][T16506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.814288][T16506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.835767][T16506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.866385][T16506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.886376][T16506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.908688][T16506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.953215][T16506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.982493][T16506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.993186][T16506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.008102][T16506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.018666][T16506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.035767][T16506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.059647][T16506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.082232][T16506] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.106602][T16506] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.115459][T16506] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.134300][T16506] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.273824][T16966] ACPI: Can not change Invalid GPE/Fixed Event status [ 380.411441][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.462066][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.537473][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.545633][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.666163][T16977] vmstat_refresh: nr_hugetlb -4096 [ 382.616579][T17055] QAT: Invalid ioctl 21531 [ 383.893910][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.906142][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.918774][T17195] Process accounting resumed [ 387.506544][ T5835] Bluetooth: hci0: Unable to find connection for big 0xd2 [ 389.735346][ T5835] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 391.441160][T17333] syz.5.5376 (17333): attempted to duplicate a private mapping with mremap. This is not supported. [ 393.321518][T17419] mmap: syz.4.5410 (17419): VmData 37601280 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 393.696439][T17433] block nbd8: NBD_DISCONNECT [ 396.091487][ T5835] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11 [ 401.571078][T17743] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 404.369058][T17862] ima: policy update failed [ 404.373784][ T30] audit: type=1802 audit(1259.840:29): pid=17862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.5581" res=0 errno=0 [ 405.131932][T17890] ecryptfs_miscdev_write: Error while inspecting packet size [ 409.404142][T18058] sg_write: data in/out 589824/1 bytes for SCSI command 0x7b-- guessing data in; [ 409.404142][T18058] program syz.4.5655 not setting count and/or reply_len properly [ 410.494411][T18098] ICMPv6: process `syz.0.5675' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 411.551228][ T5835] Bluetooth: hci2: Malformed Event: 0x02 [ 412.140599][T18157] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff88807fe08000 pfn:0x7fe08 [ 412.186259][T18157] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 412.216422][T18157] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 412.246341][T18157] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 412.265653][T18157] raw: ffff88807fe08000 0000000000000000 00000016ffffffff 0000000000000000 [ 412.292486][T18157] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 412.325848][T18157] head: ffff88807fe08000 0000000000000000 00000016ffffffff 0000000000000000 [ 412.366253][T18157] head: 00fff00000000003 ffffea0001ff8201 00000000ffffffff 00000000ffffffff [ 412.383626][T18157] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 412.426189][T18157] page dumped because: unmovable page [ 412.431706][T18157] page_owner tracks the page as allocated [ 412.473109][T18157] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5495, tgid 5495 (dhcpcd), ts 70168454050, free_ts 67291896283 [ 412.498149][T18169] kAFS: No cell specified [ 412.534684][T18157] post_alloc_hook+0x181/0x1b0 [ 412.569433][T18157] get_page_from_freelist+0x135c/0x3920 [ 412.575109][T18157] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 412.603957][T18157] alloc_pages_mpol+0x1fb/0x550 [ 412.623711][T18157] alloc_pages_noprof+0x131/0x390 [ 412.641544][T18157] skb_page_frag_refill+0x186/0x5a0 [ 412.651662][T18157] try_fill_recv+0x79c/0x2690 [ 412.657588][T18157] virtnet_open+0x3a3/0xc10 [ 412.662553][T18157] __dev_open+0x2e4/0x7d0 [ 412.679058][T18157] __dev_change_flags+0x55d/0x720 [ 412.684311][T18157] netif_change_flags+0x8d/0x160 [ 412.689504][T18157] dev_change_flags+0xba/0x250 [ 412.704293][T18157] devinet_ioctl+0x11d5/0x1f50 [ 412.711322][T18157] inet_ioctl+0x3a7/0x3f0 [ 412.715784][T18157] sock_do_ioctl+0x115/0x280 [ 412.728206][T18157] sock_ioctl+0x227/0x6b0 [ 412.732649][T18157] page last free pid 5495 tgid 5495 stack trace: [ 412.742077][T18157] __free_frozen_pages+0x69d/0xff0 [ 412.748215][T18157] __put_partials+0x16d/0x1c0 [ 412.752979][T18157] qlist_free_all+0x4e/0x120 [ 412.757820][T18157] kasan_quarantine_reduce+0x195/0x1e0 [ 412.763361][T18157] __kasan_slab_alloc+0x69/0x90 [ 412.768646][T18157] __kmalloc_noprof+0x1d4/0x510 [ 412.773575][T18157] tomoyo_realpath_from_path+0xc2/0x6e0 [ 412.780388][T18157] tomoyo_path_perm+0x274/0x460 [ 412.785334][T18157] security_inode_getattr+0x116/0x290 [ 412.792195][T18157] vfs_fstat+0x4b/0xd0 [ 412.796392][T18157] vfs_fstatat+0xbc/0xf0 [ 412.800706][T18157] __do_sys_newfstatat+0xa1/0x130 [ 412.805803][T18157] do_syscall_64+0xcd/0x230 [ 412.810530][T18157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.484493][ T5835] Bluetooth: hci1: Malformed Event: 0x02 [ 415.431329][ T5835] Bluetooth: hci3: Malformed Event: 0x02 [ 415.495710][T18310] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 415.802534][T18322] < [ 415.912647][T18325] synth uevent: /module/l2tp_ip6: unknown uevent action string [ 416.425731][ T5835] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 416.425777][ T5835] Bluetooth: hci1: unexpected subevent 0x05 length: 725 > 12 [ 416.733024][T18360] futex_wake_op: syz.0.5794 tries to shift op by 64; fix this program [ 416.802368][ T5835] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 416.802416][ T5835] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 416.822054][ T5835] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 416.822177][ T5835] Bluetooth: hci3: Malformed LE Event: 0x0d [ 416.982317][T18367] Process accounting paused [ 417.206734][T18383] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff88807fe08000 pfn:0x7fe08 [ 417.236383][T18383] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 417.245177][T18383] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 417.285534][T18383] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 417.294675][T18383] raw: ffff88807fe08000 0000000000000000 00000016ffffffff 0000000000000000 [ 417.309515][ T5835] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 417.309557][ T5835] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 417.324750][ T5835] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 417.324821][ T5835] Bluetooth: hci1: Malformed LE Event: 0x0d [ 417.356154][T18383] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 417.364967][T18383] head: ffff88807fe08000 0000000000000000 00000016ffffffff 0000000000000000 [ 417.373897][T18383] head: 00fff00000000003 ffffea0001ff8201 00000000ffffffff 00000000ffffffff [ 417.383134][T18383] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 417.392097][T18383] page dumped because: unmovable page [ 417.397571][T18383] page_owner tracks the page as allocated [ 417.404459][T18383] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5495, tgid 5495 (dhcpcd), ts 70168454050, free_ts 67291896283 [ 417.425183][T18383] post_alloc_hook+0x181/0x1b0 [ 417.430105][T18383] get_page_from_freelist+0x135c/0x3920 [ 417.435817][T18383] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 417.441864][T18383] alloc_pages_mpol+0x1fb/0x550 [ 417.447059][T18383] alloc_pages_noprof+0x131/0x390 [ 417.452687][T18383] skb_page_frag_refill+0x186/0x5a0 [ 417.459218][T18383] try_fill_recv+0x79c/0x2690 [ 417.464020][T18383] virtnet_open+0x3a3/0xc10 [ 417.468679][T18383] __dev_open+0x2e4/0x7d0 [ 417.473721][T18383] __dev_change_flags+0x55d/0x720 [ 417.479533][T18383] netif_change_flags+0x8d/0x160 [ 417.484668][T18383] dev_change_flags+0xba/0x250 [ 417.489950][T18383] devinet_ioctl+0x11d5/0x1f50 [ 417.494967][T18383] inet_ioctl+0x3a7/0x3f0 [ 417.499463][T18383] sock_do_ioctl+0x115/0x280 [ 417.504130][T18383] sock_ioctl+0x227/0x6b0 [ 417.516097][T18383] page last free pid 5495 tgid 5495 stack trace: [ 417.526410][T18383] __free_frozen_pages+0x69d/0xff0 [ 417.531641][T18383] __put_partials+0x16d/0x1c0 [ 417.542431][T18383] qlist_free_all+0x4e/0x120 [ 417.552248][T18383] kasan_quarantine_reduce+0x195/0x1e0 [ 417.552343][T18383] __kasan_slab_alloc+0x69/0x90 [ 417.552382][T18383] __kmalloc_noprof+0x1d4/0x510 [ 417.552415][T18383] tomoyo_realpath_from_path+0xc2/0x6e0 [ 417.552553][T18383] tomoyo_path_perm+0x274/0x460 [ 417.552592][T18383] security_inode_getattr+0x116/0x290 [ 417.552631][T18383] vfs_fstat+0x4b/0xd0 [ 417.552667][T18383] vfs_fstatat+0xbc/0xf0 [ 417.552704][T18383] __do_sys_newfstatat+0xa1/0x130 [ 417.552743][T18383] do_syscall_64+0xcd/0x230 [ 417.552784][T18383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.526444][ T5835] Bluetooth: hci1: command tx timeout [ 418.805451][T18449] bond0: option packets_per_slave: invalid value ( Xnp) [ 418.867909][T18449] bond0: option packets_per_slave: allowed values 0 - 65535 [ 420.156261][T18514] kAFS: Invalid Command on /proc/fs/afs/cells file [ 420.341644][ T30] audit: type=1800 audit(1275.810:30): pid=18523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5873" name="lu_gp_id" dev="configfs" ino=46040 res=0 errno=0 [ 420.353947][ T5835] Bluetooth: hci0: Malformed Event: 0x02 [ 420.636287][T18535] rtc_cmos 00:00: Alarms can be up to one day in the future [ 420.814440][T18538] ima: policy update failed [ 420.823705][ T30] audit: type=1802 audit(1276.300:31): pid=18538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.5881" res=0 errno=0 [ 421.756755][T18582] program syz.2.5901 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 421.775450][T18582] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 422.061719][ T5835] Bluetooth: hci0: Malformed Event: 0x02 [ 423.978243][ T30] audit: type=1800 audit(1279.450:32): pid=18687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5952" name="dbroot" dev="configfs" ino=47353 res=0 errno=0 [ 424.008072][T18687] db_root: cannot open: [ 424.360270][T18700] : Can't lookup blockdev [ 424.406473][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.514670][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.634872][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.820727][T18712] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to -1. Contact your vendor for updates. [ 424.840601][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.065061][T18717] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 425.283007][ T13] bridge_slave_1: left allmulticast mode [ 425.306989][ T13] bridge_slave_1: left promiscuous mode [ 425.312878][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.398504][ T13] bridge_slave_0: left allmulticast mode [ 425.408268][ T13] bridge_slave_0: left promiscuous mode [ 425.414874][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.424281][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 425.434999][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 425.445789][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 425.459117][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 425.475333][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 426.431015][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.445545][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.465114][ T13] bond0 (unregistering): Released all slaves [ 427.149854][T18795] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 427.395435][ T30] audit: type=1807 audit(1282.840:33): UNKNOWN= res=0 [ 427.404219][T18805] ima: policy update failed [ 427.446225][ T30] audit: type=1802 audit(1282.870:34): pid=18809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.6004" res=0 errno=0 [ 427.481057][T18813] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1048706]. [ 427.503617][ T13] hsr_slave_0: left promiscuous mode [ 427.532012][ T30] audit: type=1802 audit(1282.930:35): pid=18805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.6004" res=0 errno=0 [ 427.554975][ T13] hsr_slave_1: left promiscuous mode [ 427.568283][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.576163][ T5835] Bluetooth: hci0: command tx timeout [ 427.576976][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.637404][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.652382][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.703807][ T13] veth1_macvtap: left promiscuous mode [ 427.722609][T18819] QAT: failed to copy from user cfg_data. [ 427.736518][ T13] veth0_macvtap: left promiscuous mode [ 427.742551][ T13] veth1_vlan: left promiscuous mode [ 427.772824][ T13] veth0_vlan: left promiscuous mode [ 429.262446][T18878] cifs: Unknown parameter '#ʑC ˀH/R{<' [ 429.417021][ T13] team0 (unregistering): Port device team_slave_1 removed [ 429.554735][ T13] team0 (unregistering): Port device team_slave_0 removed [ 429.653372][ T5835] Bluetooth: hci0: command tx timeout [ 430.218707][T18915] CIFS mount error: No usable UNC path provided in device string! [ 430.218707][T18915] [ 430.234719][T18915] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 431.553155][T18731] chnl_net:caif_netlink_parms(): no params data found [ 431.736205][ T5835] Bluetooth: hci0: command tx timeout [ 431.944999][T18731] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.956309][T18731] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.987555][T18731] bridge_slave_0: entered allmulticast mode [ 432.005514][T18731] bridge_slave_0: entered promiscuous mode [ 432.038450][T18731] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.055987][T18731] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.066228][T18731] bridge_slave_1: entered allmulticast mode [ 432.101877][T18731] bridge_slave_1: entered promiscuous mode [ 432.292513][T18731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.315246][T18731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.404300][T18731] team0: Port device team_slave_0 added [ 432.508753][T18731] team0: Port device team_slave_1 added [ 432.670457][T18731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.682746][T18731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.736841][T18731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.800681][T18731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.826404][T18731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.852369][ C0] vkms_vblank_simulate: vblank timer overrun [ 432.893191][T18731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.054440][T18731] hsr_slave_0: entered promiscuous mode [ 433.068445][T18731] hsr_slave_1: entered promiscuous mode [ 433.074904][T18731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 433.085134][T18731] Cannot create hsr debugfs directory [ 433.806575][ T5835] Bluetooth: hci0: command tx timeout [ 433.834056][T18731] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 433.848885][T18731] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 433.870209][T19041] Invalid input. Must be >= 4608 [ 433.872546][T18731] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 433.914861][T18731] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 434.300644][T18731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.462200][T18731] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.545147][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.552400][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.603982][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.611382][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.603828][T18731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.849761][T19117] block2mtd: device name too long [ 436.342867][T18731] veth0_vlan: entered promiscuous mode [ 436.379623][T18731] veth1_vlan: entered promiscuous mode [ 436.510136][T18731] veth0_macvtap: entered promiscuous mode [ 436.542668][T18731] veth1_macvtap: entered promiscuous mode [ 436.599176][T18731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.625849][T18731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.656076][T18731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.676082][T18731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.716108][T18731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.731623][T18731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.744033][T18731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.777699][T18731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.800453][T18731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.832442][T18731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.855137][T18731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.888294][T18731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.913119][T18731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.925345][T18731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.986874][T18731] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.995669][T18731] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.024494][T18731] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.040486][T18731] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.332254][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.359209][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.463145][ T3545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.490662][ T3545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.659418][ T30] audit: type=1806 audit(1304.133:36): res=-14 [ 440.747337][T19308] usb usb2: usbfs: process 19308 (syz.5.6197) did not claim interface 1 before use [ 444.242471][T19464] cougar: G6 mapped to space [ 445.332662][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.340755][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.155769][T19584] Process accounting resumed [ 448.309381][T19635] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(5) [ 451.391929][T19762] bond0: Unable to set down delay as MII monitoring is disabled [ 452.556695][T19817] : Can't lookup blockdev [ 453.580050][T19864] [U] y [ 453.595598][T19864] [U] 9zG-aoP]:]V [ 458.560275][T20078] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string [ 461.959573][T20224] bdi 43:96: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 464.013622][T20317] usbip-vudc usbip-vudc.0: gadget not bound [ 464.665413][ T5867] smpboot: CPU 1 is now offline [ 468.260333][T20424] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 468.518596][T20430] sysfs_service_op_store: Client not running :-5: [ 470.327432][T20478] dyndbg: bad flag-op , at start of [ 470.380225][T20478] dyndbg: flags parse failed [ 470.424178][T20478] dyndbg: bad flag-op , at start of [ 470.464649][T20478] dyndbg: flags parse failed [ 471.158811][T20494] rtc_cmos 00:00: Alarms can be up to one day in the future [ 475.443784][T20597] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 477.807744][T20638] Process accounting paused [ 480.692101][T20713] HfR: entered promiscuous mode [ 482.392998][T20748] openvswitch: netlink: Message has 1 unknown bytes. [ 485.065546][T20808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6841'. [ 485.124446][T20810] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 486.241677][T20839] HfR: entered promiscuous mode [ 487.003548][T20849] svc: failed to register nfsdv3 RPC service (errno 111). [ 487.081688][T20849] svc: failed to register nfsaclv3 RPC service (errno 111). [ 491.167909][T20935] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 492.701386][T20933] kexec: Could not allocate control_code_buffer [ 493.088164][T20967] openvswitch: netlink: Key type 29 is not supported [ 493.118870][T20969] sg_read: process 3705 (syz.0.6915) changed security contexts after opening file descriptor, this is not allowed. [ 493.489577][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 494.029220][T20987] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 495.698218][T20986] kexec: Could not allocate control_code_buffer [ 498.741364][T21070] sctp: [Deprecated]: syz.4.6962 (pid 21070) Use of int in max_burst socket option deprecated. [ 498.741364][T21070] Use struct sctp_assoc_value instead [ 499.329613][T21085] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 501.259819][T21127] netlink: zone id is out of range [ 501.264980][T21127] netlink: zone id is out of range [ 501.328257][T21127] netlink: zone id is out of range [ 502.314643][T21160] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 504.466469][T21205] netlink: 'syz.6.7024': attribute type 2 has an invalid length. [ 506.775385][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.781934][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.283276][T21279] Process accounting resumed [ 509.778870][T21318] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 510.353709][T21331] openvswitch: netlink: Message has 20 unknown bytes. [ 512.522377][T21381] netlink: 'syz.4.7104': attribute type 11 has an invalid length. [ 512.591468][T21381] netlink: 'syz.4.7104': attribute type 11 has an invalid length. [ 512.641641][T21381] netlink: 'syz.4.7104': attribute type 11 has an invalid length. [ 516.132351][T21452] svc: failed to register nfsdv3 RPC service (errno 111). [ 516.178404][T21452] svc: failed to register nfsaclv3 RPC service (errno 111). [ 519.909777][T21531] nbd: couldn't find device at index 33904 [ 525.219227][T21648] ubi0: attaching mtd0 [ 525.225695][T21648] ubi0: scanning is finished [ 525.271537][T21648] ubi0: empty MTD device detected [ 525.309777][T21648] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 525.465878][T21648] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 526.783555][T21686] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 526.796165][T21688] netlink: 'syz.4.7243': attribute type 1 has an invalid length. [ 528.795287][T21743] netlink: 'syz.6.7269': attribute type 1 has an invalid length. [ 529.484700][ T30] audit: type=1804 audit(4294967385.630:37): pid=21763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7278" name="/newroot/1912/file0" dev="tmpfs" ino=9608 res=1 errno=0 [ 530.733341][T21798] netlink: 'syz.5.7295': attribute type 2 has an invalid length. [ 531.262801][T21810] .^: entered promiscuous mode [ 531.489632][T21816] openvswitch: netlink: IP tunnel dst address not specified [ 533.996402][T21883] svc: failed to register nfsdv3 RPC service (errno 111). [ 534.041776][T21883] svc: failed to register nfsaclv3 RPC service (errno 111). [ 536.219128][T21940] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 536.671990][T21953] openvswitch: netlink: IP tunnel dst address not specified [ 536.950542][T21962] openvswitch: netlink: Flow key attribute not present in set flow. [ 537.066671][T21964] openvswitch: netlink: Duplicate key (type 15). [ 537.379112][T21973] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 5 [ 538.544197][T21996] Process accounting paused [ 538.578530][T22001] openvswitch: netlink: IPv4 tunnel dst address is zero [ 538.983669][T22013] Zero length message leads to an empty skb [ 538.996846][T22012] netlink: 342 bytes leftover after parsing attributes in process `syz.5.7394'. [ 540.113378][T22035] netlink: ct family unspecified [ 542.721768][T22089] __vm_enough_memory: pid: 22089, comm: syz.4.7428, bytes: 4503599627366400 not enough memory for the allocation [ 542.885940][T22093] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 543.420872][T22105] tc_dump_action: action bad kind [ 544.466245][T22128] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7447'. [ 544.516549][T22130] CIFS mount error: No usable UNC path provided in device string! [ 544.516549][T22130] [ 544.555104][T22130] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 545.279840][T22150] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 545.388608][T22154] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 547.385033][T22205] delete_channel: no stack [ 549.563620][T22256] openvswitch: netlink: nsh attr 1 has unexpected len 14 expected 8 [ 549.770396][T22261] ptrace attach of "./syz-executor exec"[18731] was attempted by "./syz-executor exec"[22261] [ 549.809603][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 550.126434][T22269] netlink: 'syz.6.7515': attribute type 1 has an invalid length. [ 550.436381][T22277] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 550.483669][T22277] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 551.534043][T22303] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7531'. [ 553.204930][T22343] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 555.561545][T22407] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 561.014467][T22530] netlink: 'syz.6.7638': attribute type 1 has an invalid length. [ 562.790409][T22579] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 568.215449][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.223583][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.459804][T22702] netlink: 'syz.6.7716': attribute type 1 has an invalid length. [ 568.513466][T22702] nbd: error processing sock list [ 568.573828][T22698] Process accounting resumed [ 571.123664][T22764] netlink: 'syz.5.7743': attribute type 1 has an invalid length. [ 571.259367][ T5835] Bluetooth: hci2: unexpected event 0x3e length: 723 > 260 [ 571.259403][ T5835] Bluetooth: hci2: unexpected subevent 0x0d length: 722 > 260 [ 571.275348][ T5835] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 571.275404][ T5835] Bluetooth: hci2: Malformed LE Event: 0x0d [ 571.932418][T22779] netlink: zone id is out of range [ 574.945076][T22842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.355297][T22891] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7804'. [ 577.934619][T22901] netlink: 'syz.6.7809': attribute type 1 has an invalid length. [ 577.981622][T22905] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 580.339761][T22952] syz.5.7832 (22952) used greatest stack depth: 20856 bytes left [ 581.295737][T22978] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7843'. [ 581.698049][T22983] svc: failed to register nfsdv3 RPC service (errno 111). [ 581.752482][T22983] svc: failed to register nfsaclv3 RPC service (errno 111). [ 586.308216][ T53] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.520648][ T53] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.719833][ T53] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.022112][ T53] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.837072][ T53] bridge_slave_1: left allmulticast mode [ 587.896050][ T53] bridge_slave_1: left promiscuous mode [ 587.910648][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.018595][ T53] bridge_slave_0: left allmulticast mode [ 588.058259][ T53] bridge_slave_0: left promiscuous mode [ 588.106586][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.173659][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 588.189743][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 588.198112][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 588.209475][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 588.218577][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 589.875023][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.935567][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.012973][ T53] bond0 (unregistering): Released all slaves [ 590.290667][ T5840] Bluetooth: hci1: command tx timeout [ 590.336951][ T53] HfR: left promiscuous mode [ 591.858603][T23109] chnl_net:caif_netlink_parms(): no params data found [ 592.366106][ T5840] Bluetooth: hci1: command tx timeout [ 592.804381][ T53] hsr_slave_0: left promiscuous mode [ 592.911782][ T53] hsr_slave_1: left promiscuous mode [ 592.929828][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.984234][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.090157][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.115855][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.234195][ T53] veth1_macvtap: left promiscuous mode [ 593.268612][ T53] veth0_macvtap: left promiscuous mode [ 593.300495][ T53] veth1_vlan: left promiscuous mode [ 593.305852][ T53] veth0_vlan: left promiscuous mode [ 594.446345][ T5840] Bluetooth: hci1: command tx timeout [ 594.842200][ T53] team0 (unregistering): Port device team_slave_1 removed [ 594.894549][ T53] team0 (unregistering): Port device team_slave_0 removed [ 595.658072][T23109] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.665212][T23109] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.752092][T23109] bridge_slave_0: entered allmulticast mode [ 595.792453][T23109] bridge_slave_0: entered promiscuous mode [ 595.837834][T23109] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.884051][T23109] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.947388][T23109] bridge_slave_1: entered allmulticast mode [ 595.954644][T23109] bridge_slave_1: entered promiscuous mode [ 596.302481][T23109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.409117][T23109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.526340][ T5840] Bluetooth: hci1: command tx timeout [ 596.938861][T23109] team0: Port device team_slave_0 added [ 597.000635][T23109] team0: Port device team_slave_1 added [ 597.171860][T23267] sd 0:0:1:0: PR command failed: 1026 [ 597.207695][T23267] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 597.226726][T23109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.266485][T23267] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 597.280332][T23109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.448311][T23109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.522517][T23109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.586068][T23109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.749394][T23109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.070154][T23285] delete_channel: no stack [ 598.088014][T23109] hsr_slave_0: entered promiscuous mode [ 598.095011][T23109] hsr_slave_1: entered promiscuous mode [ 598.159579][T23109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 598.203392][T23109] Cannot create hsr debugfs directory [ 598.631200][T23295] Process accounting paused [ 600.747853][T23341] sd 0:0:1:0: PR command failed: 1026 [ 600.760748][T23109] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 600.798457][T23341] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 600.831087][T23341] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 600.854129][T23109] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 600.978708][T23109] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 601.070479][T23109] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 601.699487][T23109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.827321][T23109] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.917892][T20647] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.925118][T20647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.027651][T20647] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.034814][T20647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.049472][T23109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.271666][T23109] veth0_vlan: entered promiscuous mode [ 604.375333][T23109] veth1_vlan: entered promiscuous mode [ 604.627534][T23109] veth0_macvtap: entered promiscuous mode [ 604.701163][T23109] veth1_macvtap: entered promiscuous mode [ 604.859469][T23109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.956981][T23109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.011725][T23109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.056788][T23435] netlink: 'syz.4.8002': attribute type 22 has an invalid length. [ 605.090316][T23109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.136021][T23109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.203576][T23109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.317226][T23109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.428611][T23109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.528133][T23109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.588002][T23109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.656010][T23109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.747750][T23109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.819519][T23109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.874619][T23109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.982148][T23109] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.068867][T23109] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.129008][T23109] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.174842][T23109] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.610049][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.672648][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.812327][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.866293][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.807345][T23584] cifs: Unknown parameter '' [ 629.660680][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.667720][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.091873][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.102686][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 713.656414][T23662] Bluetooth: hci1: command 0x0406 tx timeout [ 752.542420][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.548906][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 756.366431][ T31] INFO: task jbd2/sda1-8:5163 blocked for more than 143 seconds. [ 756.374189][ T31] Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 [ 756.408216][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 756.423132][ T31] task:jbd2/sda1-8 state:D stack:26008 pid:5163 tgid:5163 ppid:2 task_flags:0x240040 flags:0x00004000 [ 756.440322][ T31] Call Trace: [ 756.443621][ T31] [ 756.453376][ T31] __schedule+0x116f/0x5de0 [ 756.466233][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 756.471209][ T31] ? __pfx___schedule+0x10/0x10 [ 756.488973][ T31] ? find_held_lock+0x2b/0x80 [ 756.493677][ T31] ? schedule+0x2d7/0x3a0 [ 756.521239][ T31] schedule+0xe7/0x3a0 [ 756.525374][ T31] jbd2_journal_wait_updates+0x11e/0x240 [ 756.541448][ T31] ? __pfx_jbd2_journal_wait_updates+0x10/0x10 [ 756.550287][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 756.565245][ T31] ? __pfx_do_raw_write_lock+0x10/0x10 [ 756.575225][ T31] ? jbd2_journal_commit_transaction+0x4ec/0x6830 [ 756.588320][ T31] jbd2_journal_commit_transaction+0x828/0x6830 [ 756.594622][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 756.611663][ T31] ? lock_acquire+0x179/0x350 [ 756.621137][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 756.630057][ T31] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 756.644902][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 756.654719][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 756.666003][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 756.671662][ T31] ? __pfx_debug_object_deactivate+0x10/0x10 [ 756.694750][ T31] ? find_held_lock+0x2b/0x80 [ 756.705242][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 756.721745][ T31] ? rcu_is_watching+0x12/0xc0 [ 756.734553][ T31] kjournald2+0x1f4/0x760 [ 756.743344][ T31] ? __pfx_kjournald2+0x10/0x10 [ 756.754631][ T31] ? find_held_lock+0x2b/0x80 [ 756.764351][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 756.775900][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 756.781128][ T31] ? __kthread_parkme+0x19e/0x250 [ 756.798362][ T31] ? __pfx_kjournald2+0x10/0x10 [ 756.803259][ T31] kthread+0x3c2/0x780 [ 756.810709][ T31] ? __pfx_kthread+0x10/0x10 [ 756.815332][ T31] ? __pfx_kthread+0x10/0x10 [ 756.823454][ T31] ? __pfx_kthread+0x10/0x10 [ 756.831212][ T31] ? __pfx_kthread+0x10/0x10 [ 756.835835][ T31] ? rcu_is_watching+0x12/0xc0 [ 756.843239][ T31] ? __pfx_kthread+0x10/0x10 [ 756.849358][ T31] ret_from_fork+0x45/0x80 [ 756.853903][ T31] ? __pfx_kthread+0x10/0x10 [ 756.860812][ T31] ret_from_fork_asm+0x1a/0x30 [ 756.866537][ T31] [ 756.869622][ T31] INFO: task syz-executor:5817 blocked for more than 143 seconds. [ 756.880023][ T31] Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 [ 756.889464][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 756.901167][ T31] task:syz-executor state:D stack:23112 pid:5817 tgid:5817 ppid:5815 task_flags:0x400100 flags:0x00000002 [ 756.914646][ T31] Call Trace: [ 756.921871][ T31] [ 756.924824][ T31] __schedule+0x116f/0x5de0 [ 756.931007][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 756.940362][ T31] ? __pfx___schedule+0x10/0x10 [ 756.945242][ T31] ? find_held_lock+0x2b/0x80 [ 756.950304][ T31] ? schedule+0x2d7/0x3a0 [ 756.954653][ T31] schedule+0xe7/0x3a0 [ 756.961160][ T31] ? wait_transaction_locked+0x17c/0x230 [ 756.967771][ T31] wait_transaction_locked+0x1a1/0x230 [ 756.973265][ T31] ? wait_transaction_locked+0x17c/0x230 [ 756.981307][ T31] ? __pfx_wait_transaction_locked+0x10/0x10 [ 756.987733][ T31] ? stack_depot_save_flags+0x28/0xa50 [ 756.993236][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 757.002274][ T31] add_transaction_credits+0x110/0xe60 [ 757.008151][ T31] ? do_page_mkwrite+0x171/0x380 [ 757.014406][ T31] ? do_wp_page+0xb9e/0x58e0 [ 757.022419][ T31] ? __handle_mm_fault+0x1ada/0x2a40 [ 757.029369][ T31] ? handle_mm_fault+0x3fe/0xad0 [ 757.034326][ T31] ? do_user_addr_fault+0x60c/0x1370 [ 757.043267][ T31] ? __pfx_add_transaction_credits+0x10/0x10 [ 757.051662][ T31] ? lock_acquire+0x179/0x350 [ 757.058806][ T31] start_this_handle+0x3e7/0x1410 [ 757.063868][ T31] ? __pfx_start_this_handle+0x10/0x10 [ 757.070421][ T31] ? rcu_is_watching+0x12/0xc0 [ 757.075217][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 757.083125][ T31] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 757.089221][ T31] ? jbd2__journal_start+0x193/0x6a0 [ 757.094536][ T31] jbd2__journal_start+0x394/0x6a0 [ 757.102829][ T31] __ext4_journal_start_sb+0x195/0x690 [ 757.108563][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 757.114207][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 757.122630][ T31] ext4_dirty_inode+0xa1/0x130 [ 757.127659][ T31] ? rcu_is_watching+0x12/0xc0 [ 757.132438][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 757.141940][ T31] generic_update_time+0xcf/0xf0 [ 757.148443][ T31] file_update_time+0x17d/0x1c0 [ 757.153322][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 757.162777][ T31] ? tcp_recvmsg+0x1f9/0x680 [ 757.168049][ T31] ? __pfx_tcp_recvmsg+0x10/0x10 [ 757.173762][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 757.181581][ T31] ? vm_normal_page+0x13b/0x2b0 [ 757.186718][ T31] ? find_held_lock+0x2b/0x80 [ 757.191428][ T31] ? find_held_lock+0x2b/0x80 [ 757.198652][ T31] do_page_mkwrite+0x171/0x380 [ 757.204362][ T31] do_wp_page+0xb9e/0x58e0 [ 757.209254][ T31] ? __pfx_do_wp_page+0x10/0x10 [ 757.214142][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 757.222955][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 757.228635][ T31] ? ___pte_offset_map+0x1bc/0x540 [ 757.233784][ T31] __handle_mm_fault+0x1ada/0x2a40 [ 757.241479][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 757.249783][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 757.255018][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 757.263975][ T31] handle_mm_fault+0x3fe/0xad0 [ 757.271085][ T31] do_user_addr_fault+0x60c/0x1370 [ 757.279396][ T31] exc_page_fault+0x5c/0xc0 [ 757.283937][ T31] asm_exc_page_fault+0x26/0x30 [ 757.289162][ T31] RIP: 0033:0x7fac4b077dcf [ 757.293590][ T31] RSP: 002b:00007ffc8a1518b0 EFLAGS: 00010202 [ 757.302197][ T31] RAX: 00007fac499fc000 RBX: 00005555590360a0 RCX: 0000000000000001 [ 757.311141][ T31] RDX: 1ffffffff0f45909 RSI: 0000555559037338 RDI: 0000000000000002 [ 757.322784][ T31] RBP: 00007ffc8a151ba0 R08: 0000555559037388 R09: 0000000000000b21 [ 757.331023][ T31] R10: 0000000000000001 R11: 00007ffc8a151db0 R12: 00007ffc8a151c00 [ 757.341462][ T31] R13: 0000000000000004 R14: 00007ffc8a151920 R15: 00007ffc8a1519f0 [ 757.349935][ T31] [ 757.352989][ T31] INFO: task kworker/u8:4:20647 blocked for more than 144 seconds. [ 757.365018][ T31] Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 [ 757.381535][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 757.390512][ T31] task:kworker/u8:4 state:D stack:23512 pid:20647 tgid:20647 ppid:2 task_flags:0x4248060 flags:0x00004000 [ 757.404951][ T31] Workqueue: writeback wb_workfn (flush-8:0) [ 757.412179][ T31] Call Trace: [ 757.415494][ T31] [ 757.420023][ T31] __schedule+0x116f/0x5de0 [ 757.427126][ T31] ? blk_mq_flush_plug_list+0x75a/0x1c70 [ 757.432799][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 757.439226][ T31] ? __pfx___schedule+0x10/0x10 [ 757.444100][ T31] ? __blk_flush_plug+0x2f3/0x4b0 [ 757.450594][ T31] ? find_held_lock+0x2b/0x80 [ 757.455375][ T31] ? schedule+0x2d7/0x3a0 [ 757.461154][ T31] schedule+0xe7/0x3a0 [ 757.465246][ T31] io_schedule+0xbf/0x130 [ 757.472224][ T31] bit_wait_io+0x15/0xe0 [ 757.479365][ T31] __wait_on_bit_lock+0x112/0x1a0 [ 757.484423][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 757.495122][ T31] out_of_line_wait_on_bit_lock+0xd9/0x110 [ 757.502876][ T31] ? __pfx_out_of_line_wait_on_bit_lock+0x10/0x10 [ 757.511399][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 757.518341][ T31] ? __pfx___might_resched+0x10/0x10 [ 757.524370][ T31] __lock_buffer+0x67/0x70 [ 757.530928][ T31] do_get_write_access+0x8cd/0x12a0 [ 757.537487][ T31] ? jbd2_write_access_granted+0x61/0x3d0 [ 757.543240][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 757.550728][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 757.558178][ T31] ext4_ext_insert_extent+0xf96/0x4610 [ 757.563688][ T31] ? __read_extent_tree_block+0x2ca/0x640 [ 757.570976][ T31] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 757.579797][ T31] ? __pfx_ext4_ext_insert_extent+0x10/0x10 [ 757.585719][ T31] ? ext4_ext_search_right+0x2c2/0xb90 [ 757.593565][ T31] ext4_ext_map_blocks+0x205b/0x5d60 [ 757.603273][ T31] ? stack_trace_save+0x8e/0xc0 [ 757.609531][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 757.615784][ T31] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 757.622926][ T31] ? add_grec+0x7f9/0x11f0 [ 757.630019][ T31] ? __kasan_slab_alloc+0x89/0x90 [ 757.635072][ T31] ? ext4_do_writepages+0x1432/0x3490 [ 757.642005][ T31] ? __pfx___might_resched+0x10/0x10 [ 757.650290][ T31] ? __pfx_down_write+0x10/0x10 [ 757.655179][ T31] ? ext4_es_lookup_extent+0xc7/0xc50 [ 757.662058][ T31] ext4_map_blocks+0x45b/0x1390 [ 757.668365][ T31] ? __pfx_ext4_map_blocks+0x10/0x10 [ 757.673682][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 757.680572][ T31] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 757.689495][ T31] ext4_do_writepages+0x1a2c/0x3490 [ 757.694757][ T31] ? __pfx_ext4_do_writepages+0x10/0x10 [ 757.702786][ T31] ? ext4_writepages+0x37a/0x7d0 [ 757.712324][ T31] ext4_writepages+0x37a/0x7d0 [ 757.719369][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 757.724689][ T31] ? wb_update_bandwidth+0xa0/0xe0 [ 757.738517][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 757.743846][ T31] do_writepages+0x1b2/0x820 [ 757.748805][ T31] ? __pfx_do_writepages+0x10/0x10 [ 757.753933][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 757.761367][ T31] ? reacquire_held_locks+0xcd/0x1f0 [ 757.766925][ T31] __writeback_single_inode+0x160/0xfb0 [ 757.772496][ T31] ? __pfx___writeback_single_inode+0x10/0x10 [ 757.781078][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 757.787272][ T31] writeback_sb_inodes+0x601/0xf90 [ 757.792429][ T31] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 757.801848][ T31] ? _raw_spin_unlock+0x28/0x50 [ 757.809456][ T31] ? move_expired_inodes+0x5a0/0x850 [ 757.814791][ T31] __writeback_inodes_wb+0xf8/0x2d0 [ 757.825812][ T31] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 757.834014][ T31] ? queue_io+0x3f6/0x520 [ 757.840829][ T31] wb_writeback+0x7f3/0xb70 [ 757.845369][ T31] ? __pfx_wb_writeback+0x10/0x10 [ 757.850794][ T31] ? mark_held_locks+0x49/0x80 [ 757.855582][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 757.863488][ T31] wb_workfn+0x748/0xbe0 [ 757.868016][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 757.873843][ T31] ? __pfx_wb_workfn+0x10/0x10 [ 757.881227][ T31] ? rcu_is_watching+0x12/0xc0 [ 757.888144][ T31] process_one_work+0x9cc/0x1b70 [ 757.893140][ T31] ? __pfx_process_one_work+0x10/0x10 [ 757.901120][ T31] ? assign_work+0x1a0/0x250 [ 757.905746][ T31] worker_thread+0x6c8/0xf10 [ 757.911851][ T31] ? __kthread_parkme+0x19e/0x250 [ 757.920950][ T31] ? __pfx_worker_thread+0x10/0x10 [ 757.929024][ T31] kthread+0x3c2/0x780 [ 757.933880][ T31] ? __pfx_kthread+0x10/0x10 [ 757.941421][ T31] ? __pfx_kthread+0x10/0x10 [ 757.946263][ T31] ? __pfx_kthread+0x10/0x10 [ 757.950875][ T31] ? __pfx_kthread+0x10/0x10 [ 757.955482][ T31] ? rcu_is_watching+0x12/0xc0 [ 757.962845][ T31] ? __pfx_kthread+0x10/0x10 [ 757.968280][ T31] ret_from_fork+0x45/0x80 [ 757.972726][ T31] ? __pfx_kthread+0x10/0x10 [ 757.979846][ T31] ret_from_fork_asm+0x1a/0x30 [ 757.984653][ T31] [ 757.988064][ T31] INFO: task syz.6.8074:23644 blocked for more than 144 seconds. [ 757.999042][ T31] Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 [ 758.008723][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 758.022591][ T31] task:syz.6.8074 state:D stack:28472 pid:23644 tgid:23644 ppid:18731 task_flags:0x400040 flags:0x00000004 [ 758.041827][ T31] Call Trace: [ 758.045129][ T31] [ 758.048483][ T31] __schedule+0x116f/0x5de0 [ 758.053031][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 758.060638][ T31] ? __pfx___schedule+0x10/0x10 [ 758.065526][ T31] ? find_held_lock+0x2b/0x80 [ 758.070510][ T31] ? schedule+0x2d7/0x3a0 [ 758.074863][ T31] schedule+0xe7/0x3a0 [ 758.081445][ T31] ? wait_transaction_locked+0x17c/0x230 [ 758.087350][ T31] wait_transaction_locked+0x1a1/0x230 [ 758.093473][ T31] ? wait_transaction_locked+0x17c/0x230 [ 758.101817][ T31] ? __pfx_wait_transaction_locked+0x10/0x10 [ 758.108029][ T31] ? stack_depot_save_flags+0x28/0xa50 [ 758.113516][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 758.122176][ T31] add_transaction_credits+0x110/0xe60 [ 758.129917][ T31] ? do_page_mkwrite+0x171/0x380 [ 758.134886][ T31] ? do_pte_missing+0x29c/0x3fb0 [ 758.144571][ T31] ? __handle_mm_fault+0x103d/0x2a40 [ 758.153262][ T31] ? handle_mm_fault+0x3fe/0xad0 [ 758.160625][ T31] ? do_user_addr_fault+0x60c/0x1370 [ 758.166150][ T31] ? __pfx_add_transaction_credits+0x10/0x10 [ 758.172237][ T31] ? lock_acquire+0x179/0x350 [ 758.179417][ T31] start_this_handle+0x3e7/0x1410 [ 758.184472][ T31] ? __pfx_start_this_handle+0x10/0x10 [ 758.190297][ T31] ? rcu_is_watching+0x12/0xc0 [ 758.195664][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 758.203798][ T31] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 758.211640][ T31] ? jbd2__journal_start+0x193/0x6a0 [ 758.219533][ T31] jbd2__journal_start+0x394/0x6a0 [ 758.224681][ T31] __ext4_journal_start_sb+0x195/0x690 [ 758.231236][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 758.240658][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 758.247183][ T31] ext4_dirty_inode+0xa1/0x130 [ 758.251971][ T31] ? rcu_is_watching+0x12/0xc0 [ 758.263345][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 758.268622][ T31] generic_update_time+0xcf/0xf0 [ 758.273576][ T31] file_update_time+0x17d/0x1c0 [ 758.280956][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 758.287091][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 758.292583][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 758.301335][ T31] ? pte_alloc_one+0x2b1/0x380 [ 758.306388][ T31] do_page_mkwrite+0x171/0x380 [ 758.311177][ T31] do_pte_missing+0x29c/0x3fb0 [ 758.318608][ T31] __handle_mm_fault+0x103d/0x2a40 [ 758.323751][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 758.330326][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 758.335563][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 758.344040][ T31] handle_mm_fault+0x3fe/0xad0 [ 758.351002][ T31] do_user_addr_fault+0x60c/0x1370 [ 758.358850][ T31] exc_page_fault+0x5c/0xc0 [ 758.363404][ T31] asm_exc_page_fault+0x26/0x30 [ 758.372967][ T31] RIP: 0033:0x7fb41de6eada [ 758.379904][ T31] RSP: 002b:00007fffdc8afd00 EFLAGS: 00010202 [ 758.386249][ T31] RAX: 0000001b2ce20000 RBX: 00007fb41ece5720 RCX: 0000001b2ce1fff8 [ 758.394249][ T31] RDX: 00000000003ffde8 RSI: 00000000003ffde8 RDI: 00007fb41ece5700 [ 758.405544][ T31] RBP: ffffffff893aacab R08: 00007fb41e1b6038 R09: 00007fb41e1a2000 [ 758.413785][ T31] R10: 00007fb41d5ff008 R11: 0000000000000000 R12: 0000000000000000 [ 758.424243][ T31] R13: 0000000000000001 R14: ffffffff893aa5c1 R15: 0000000000000001 [ 758.433171][ T31] ? __x64_sys_socket+0x11/0xb0 [ 758.440635][ T31] ? __sys_socketpair+0x57b/0x5a0 [ 758.446769][ T31] [ 758.450455][ T31] INFO: task syz.0.8075:23646 blocked for more than 145 seconds. [ 758.461551][ T31] Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 [ 758.471153][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 758.485830][ T31] task:syz.0.8075 state:D stack:28632 pid:23646 tgid:23646 ppid:5830 task_flags:0x400040 flags:0x00000004 [ 758.499930][ T31] Call Trace: [ 758.503877][ T31] [ 758.507582][ T31] __schedule+0x116f/0x5de0 [ 758.512136][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 758.519845][ T31] ? __pfx___schedule+0x10/0x10 [ 758.524730][ T31] ? find_held_lock+0x2b/0x80 [ 758.530233][ T31] ? schedule+0x2d7/0x3a0 [ 758.535307][ T31] schedule+0xe7/0x3a0 [ 758.541995][ T31] ? wait_transaction_locked+0x17c/0x230 [ 758.548629][ T31] wait_transaction_locked+0x1a1/0x230 [ 758.554813][ T31] ? wait_transaction_locked+0x17c/0x230 [ 758.563111][ T31] ? __pfx_wait_transaction_locked+0x10/0x10 [ 758.570585][ T31] ? stack_depot_save_flags+0x28/0xa50 [ 758.578916][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 758.585056][ T31] add_transaction_credits+0x110/0xe60 [ 758.594951][ T31] ? do_page_mkwrite+0x171/0x380 [ 758.602670][ T31] ? do_pte_missing+0x29c/0x3fb0 [ 758.609829][ T31] ? __handle_mm_fault+0x103d/0x2a40 [ 758.615141][ T31] ? handle_mm_fault+0x3fe/0xad0 [ 758.622696][ T31] ? do_user_addr_fault+0x60c/0x1370 [ 758.628228][ T31] ? __pfx_add_transaction_credits+0x10/0x10 [ 758.634228][ T31] ? lock_acquire+0x179/0x350 [ 758.642185][ T31] start_this_handle+0x3e7/0x1410 [ 758.647482][ T31] ? __pfx_start_this_handle+0x10/0x10 [ 758.654275][ T31] ? rcu_is_watching+0x12/0xc0 [ 758.661649][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 758.667258][ T31] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 758.672909][ T31] ? jbd2__journal_start+0x193/0x6a0 [ 758.681969][ T31] jbd2__journal_start+0x394/0x6a0 [ 758.688407][ T31] __ext4_journal_start_sb+0x195/0x690 [ 758.693898][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 758.705094][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 758.711931][ T31] ext4_dirty_inode+0xa1/0x130 [ 758.719327][ T31] ? rcu_is_watching+0x12/0xc0 [ 758.724148][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 758.729582][ T31] generic_update_time+0xcf/0xf0 [ 758.734542][ T31] file_update_time+0x17d/0x1c0 [ 758.742692][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 758.748165][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 758.755011][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 758.763147][ T31] ? pte_alloc_one+0x2b1/0x380 [ 758.772760][ T31] do_page_mkwrite+0x171/0x380 [ 758.779978][ T31] do_pte_missing+0x29c/0x3fb0 [ 758.784762][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 758.791503][ T31] ? __pmd_alloc+0x3c2/0x870 [ 758.798801][ T31] __handle_mm_fault+0x103d/0x2a40 [ 758.803942][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 758.813514][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 758.821411][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 758.827216][ T31] handle_mm_fault+0x3fe/0xad0 [ 758.832036][ T31] do_user_addr_fault+0x60c/0x1370 [ 758.839803][ T31] exc_page_fault+0x5c/0xc0 [ 758.844891][ T31] asm_exc_page_fault+0x26/0x30 [ 758.851818][ T31] RIP: 0033:0x7f262b86547b [ 758.860729][ T31] RSP: 002b:00007ffed23d2f10 EFLAGS: 00010246 [ 758.867094][ T31] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 758.875078][ T31] RDX: 0000001b2fc20000 RSI: 0000000000400000 RDI: 00007f262ba98d50 [ 758.885972][ T31] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000 [ 758.893968][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 758.905747][ T31] R13: 00000000000927c0 R14: 00000000000958eb R15: 00007ffed23d31c0 [ 758.914958][ T31] [ 758.923514][ T31] INFO: task syz.5.8076:23647 blocked for more than 145 seconds. [ 758.932762][ T31] Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 [ 758.945481][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 758.954475][ T31] task:syz.5.8076 state:D stack:28792 pid:23647 tgid:23647 ppid:23109 task_flags:0x400040 flags:0x00000004 [ 758.970368][ T31] Call Trace: [ 758.973704][ T31] [ 758.977117][ T31] __schedule+0x116f/0x5de0 [ 758.981661][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 758.989277][ T31] ? __pfx___schedule+0x10/0x10 [ 758.994161][ T31] ? find_held_lock+0x2b/0x80 [ 758.999213][ T31] ? schedule+0x2d7/0x3a0 [ 759.003570][ T31] schedule+0xe7/0x3a0 [ 759.013613][ T31] ? wait_transaction_locked+0x17c/0x230 [ 759.019686][ T31] wait_transaction_locked+0x1a1/0x230 [ 759.025168][ T31] ? wait_transaction_locked+0x17c/0x230 [ 759.036557][ T31] ? __pfx_wait_transaction_locked+0x10/0x10 [ 759.042567][ T31] ? stack_depot_save_flags+0x28/0xa50 [ 759.051223][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 759.058809][ T31] add_transaction_credits+0x110/0xe60 [ 759.064996][ T31] ? do_page_mkwrite+0x171/0x380 [ 759.071964][ T31] ? do_pte_missing+0x29c/0x3fb0 [ 759.077746][ T31] ? __handle_mm_fault+0x103d/0x2a40 [ 759.083049][ T31] ? handle_mm_fault+0x3fe/0xad0 [ 759.090349][ T31] ? do_user_addr_fault+0x60c/0x1370 [ 759.095670][ T31] ? __pfx_add_transaction_credits+0x10/0x10 [ 759.102568][ T31] ? lock_acquire+0x179/0x350 [ 759.109191][ T31] start_this_handle+0x3e7/0x1410 [ 759.114271][ T31] ? __pfx_start_this_handle+0x10/0x10 [ 759.122741][ T31] ? rcu_is_watching+0x12/0xc0 [ 759.130166][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 759.135568][ T31] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 759.144983][ T31] ? jbd2__journal_start+0x193/0x6a0 [ 759.153235][ T31] jbd2__journal_start+0x394/0x6a0 [ 759.159618][ T31] __ext4_journal_start_sb+0x195/0x690 [ 759.168357][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 759.173329][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 759.179634][ T31] ext4_dirty_inode+0xa1/0x130 [ 759.184445][ T31] ? rcu_is_watching+0x12/0xc0 [ 759.191369][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 759.197213][ T31] generic_update_time+0xcf/0xf0 [ 759.202174][ T31] file_update_time+0x17d/0x1c0 [ 759.209139][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 759.214214][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 759.221385][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 759.230082][ T31] ? pte_alloc_one+0x2b1/0x380 [ 759.234886][ T31] do_page_mkwrite+0x171/0x380 [ 759.240759][ T31] do_pte_missing+0x29c/0x3fb0 [ 759.245547][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 759.259270][ T31] ? __pmd_alloc+0x3c2/0x870 [ 759.264641][ T31] __handle_mm_fault+0x103d/0x2a40 [ 759.271160][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 759.279092][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 759.284372][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 759.289956][ T31] handle_mm_fault+0x3fe/0xad0 [ 759.294750][ T31] do_user_addr_fault+0x60c/0x1370 [ 759.302489][ T31] exc_page_fault+0x5c/0xc0 [ 759.307327][ T31] asm_exc_page_fault+0x26/0x30 [ 759.312224][ T31] RIP: 0033:0x7f214c66547b [ 759.319222][ T31] RSP: 002b:00007ffe69e61cd0 EFLAGS: 00010246 [ 759.326914][ T31] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 759.334914][ T31] RDX: 0000001b2eb20000 RSI: 0000000000400000 RDI: 00007f214c898d50 [ 759.346838][ T31] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000 [ 759.355574][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 759.371307][ T31] R13: 00000000000927c0 R14: 0000000000095915 R15: 00007ffe69e61f80 [ 759.380527][ T31] [ 759.383567][ T31] INFO: task syz.4.8077:23648 blocked for more than 146 seconds. [ 759.393452][ T31] Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 [ 759.403559][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 759.414193][ T31] task:syz.4.8077 state:D stack:28792 pid:23648 tgid:23648 ppid:11516 task_flags:0x400040 flags:0x00000004 [ 759.429447][ T31] Call Trace: [ 759.432745][ T31] [ 759.435686][ T31] __schedule+0x116f/0x5de0 [ 759.440742][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 759.445721][ T31] ? __pfx___schedule+0x10/0x10 [ 759.455157][ T31] ? find_held_lock+0x2b/0x80 [ 759.460336][ T31] ? schedule+0x2d7/0x3a0 [ 759.464703][ T31] schedule+0xe7/0x3a0 [ 759.473619][ T31] ? wait_transaction_locked+0x17c/0x230 [ 759.482547][ T31] wait_transaction_locked+0x1a1/0x230 [ 759.491185][ T31] ? wait_transaction_locked+0x17c/0x230 [ 759.497115][ T31] ? __pfx_wait_transaction_locked+0x10/0x10 [ 759.503115][ T31] ? stack_depot_save_flags+0x28/0xa50 [ 759.511477][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 759.517812][ T31] add_transaction_credits+0x110/0xe60 [ 759.523291][ T31] ? do_page_mkwrite+0x171/0x380 [ 759.531519][ T31] ? do_pte_missing+0x29c/0x3fb0 [ 759.536714][ T31] ? __handle_mm_fault+0x103d/0x2a40 [ 759.542014][ T31] ? handle_mm_fault+0x3fe/0xad0 [ 759.549760][ T31] ? do_user_addr_fault+0x60c/0x1370 [ 759.555075][ T31] ? __pfx_add_transaction_credits+0x10/0x10 [ 759.563371][ T31] ? lock_acquire+0x179/0x350 [ 759.572820][ T31] start_this_handle+0x3e7/0x1410 [ 759.579573][ T31] ? __pfx_start_this_handle+0x10/0x10 [ 759.585061][ T31] ? rcu_is_watching+0x12/0xc0 [ 759.595488][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 759.601527][ T31] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 759.609708][ T31] ? jbd2__journal_start+0x193/0x6a0 [ 759.615024][ T31] jbd2__journal_start+0x394/0x6a0 [ 759.620505][ T31] __ext4_journal_start_sb+0x195/0x690 [ 759.629184][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 759.634151][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 759.639869][ T31] ext4_dirty_inode+0xa1/0x130 [ 759.644650][ T31] ? rcu_is_watching+0x12/0xc0 [ 759.652043][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 759.657311][ T31] generic_update_time+0xcf/0xf0 [ 759.663028][ T31] file_update_time+0x17d/0x1c0 [ 759.671770][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 759.678473][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 759.683953][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 759.692848][ T31] ? pte_alloc_one+0x2b1/0x380 [ 759.700167][ T31] do_page_mkwrite+0x171/0x380 [ 759.704963][ T31] do_pte_missing+0x29c/0x3fb0 [ 759.712708][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 759.718320][ T31] ? __pmd_alloc+0x3c2/0x870 [ 759.722942][ T31] __handle_mm_fault+0x103d/0x2a40 [ 759.731916][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 759.738289][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 759.743516][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 759.751317][ T31] handle_mm_fault+0x3fe/0xad0 [ 759.756286][ T31] do_user_addr_fault+0x60c/0x1370 [ 759.762194][ T31] exc_page_fault+0x5c/0xc0 [ 759.769336][ T31] asm_exc_page_fault+0x26/0x30 [ 759.774210][ T31] RIP: 0033:0x7f5068e6547b [ 759.781476][ T31] RSP: 002b:00007fffe6e2cbc0 EFLAGS: 00010246 [ 759.790142][ T31] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 759.799064][ T31] RDX: 0000001b31720000 RSI: 0000000000400000 RDI: 00007f5069098d50 [ 759.816139][ T31] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000 [ 759.824125][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 759.835054][ T31] R13: 00000000000927c0 R14: 0000000000095980 R15: 00007fffe6e2ce70 [ 759.843287][ T31] [ 759.848823][ T31] [ 759.848823][ T31] Showing all locks held in the system: [ 759.861084][ T31] 1 lock held by khungtaskd/31: [ 759.868965][ T31] #0: ffffffff8e3bf440 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 759.879838][ T31] 2 locks held by syz-executor/5817: [ 759.885823][ T31] #0: ffff88807fe69588 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 759.901370][ T31] #1: ffff8880244c0518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 759.913847][ T31] 6 locks held by kworker/u8:4/20647: [ 759.921617][ T31] #0: ffff88801f6e6148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 759.935466][ T31] #1: ffffc9000df97d18 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 759.950111][ T31] #2: ffff8880244c00e0 (&type->s_umount_key#31){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 759.960909][ T31] #3: ffff8880244c2b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1b2/0x820 [ 759.975250][ T31] #4: ffff8880244c4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 759.988474][ T31] #5: ffff88807846a080 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x355/0x1390 [ 760.000390][ T31] 2 locks held by getty/22707: [ 760.005171][ T31] #0: ffff88814ce430a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 760.018368][ T31] #1: ffffc9000b4f32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 760.031442][ T31] 2 locks held by syz.6.8074/23644: [ 760.039251][ T31] #0: ffff8880679c76c8 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 760.050068][ T31] #1: ffff8880244c0518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 760.061961][ T31] 2 locks held by syz.0.8075/23646: [ 760.068024][ T31] #0: ffff888060ce1308 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 760.079960][ T31] #1: ffff8880244c0518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 760.091590][ T31] 2 locks held by syz.5.8076/23647: [ 760.098753][ T31] #0: ffff88807a16d6c8 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 760.110314][ T31] #1: ffff8880244c0518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 760.121853][ T31] 2 locks held by syz.4.8077/23648: [ 760.129489][ T31] #0: ffff88807f358808 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 760.143653][ T31] #1: ffff8880244c0518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 760.154089][ T31] [ 760.158359][ T31] ============================================= [ 760.158359][ T31] [ 760.168194][ T31] NMI backtrace for cpu 0 [ 760.168217][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 760.168254][ T31] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 760.168263][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 760.168276][ T31] Call Trace: [ 760.168283][ T31] [ 760.168291][ T31] dump_stack_lvl+0x116/0x1f0 [ 760.168325][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 760.168349][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 760.168387][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 760.168413][ T31] watchdog+0xf70/0x12c0 [ 760.168448][ T31] ? __pfx_watchdog+0x10/0x10 [ 760.168475][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 760.168506][ T31] ? __kthread_parkme+0x19e/0x250 [ 760.168534][ T31] ? __pfx_watchdog+0x10/0x10 [ 760.168563][ T31] kthread+0x3c2/0x780 [ 760.168595][ T31] ? __pfx_kthread+0x10/0x10 [ 760.168625][ T31] ? __pfx_kthread+0x10/0x10 [ 760.168655][ T31] ? __pfx_kthread+0x10/0x10 [ 760.168685][ T31] ? __pfx_kthread+0x10/0x10 [ 760.168715][ T31] ? rcu_is_watching+0x12/0xc0 [ 760.168738][ T31] ? __pfx_kthread+0x10/0x10 [ 760.168770][ T31] ret_from_fork+0x45/0x80 [ 760.168804][ T31] ? __pfx_kthread+0x10/0x10 [ 760.168836][ T31] ret_from_fork_asm+0x1a/0x30 [ 760.168883][ T31] [ 760.168899][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 760.309297][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 760.322677][ T31] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 760.328652][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 760.338724][ T31] Call Trace: [ 760.342021][ T31] [ 760.344958][ T31] dump_stack_lvl+0x3d/0x1f0 [ 760.349567][ T31] panic+0x71c/0x800 [ 760.353492][ T31] ? __pfx_panic+0x10/0x10 [ 760.357930][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 760.362888][ T31] ? nmi_backtrace_stall_check+0x6e/0x540 [ 760.368628][ T31] ? irq_work_queue+0xce/0x100 [ 760.373413][ T31] ? watchdog+0xdda/0x12c0 [ 760.377843][ T31] ? watchdog+0xdcd/0x12c0 [ 760.382383][ T31] watchdog+0xdeb/0x12c0 [ 760.386656][ T31] ? __pfx_watchdog+0x10/0x10 [ 760.391348][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 760.396563][ T31] ? __kthread_parkme+0x19e/0x250 [ 760.401616][ T31] ? __pfx_watchdog+0x10/0x10 [ 760.406307][ T31] kthread+0x3c2/0x780 [ 760.410397][ T31] ? __pfx_kthread+0x10/0x10 [ 760.415004][ T31] ? __pfx_kthread+0x10/0x10 [ 760.419610][ T31] ? __pfx_kthread+0x10/0x10 [ 760.424213][ T31] ? __pfx_kthread+0x10/0x10 [ 760.428819][ T31] ? rcu_is_watching+0x12/0xc0 [ 760.433591][ T31] ? __pfx_kthread+0x10/0x10 [ 760.438285][ T31] ret_from_fork+0x45/0x80 [ 760.442725][ T31] ? __pfx_kthread+0x10/0x10 [ 760.447331][ T31] ret_from_fork_asm+0x1a/0x30 [ 760.452127][ T31] [ 760.455210][ T31] Kernel Offset: disabled [ 760.459541][ T31] Rebooting in 86400 seconds..